top of page
Image by Caju Gomes

Mutual Ventures Privacy Notice 

​Last Updated: 18 August 2026 

​

Mutual Ventures is a socially focused management consultancy working across public, private, voluntary and charity sectors. If you would like to contact us regarding our privacy notice, please email info@mutualventures.co.uk.

​

1. Introduction 

Mutual Ventures Limited ("Mutual Ventures", "we", "us" or "our") is committed to protecting the privacy, confidentiality and security of personal data. This Privacy Notice explains how we collect, use, store, share and protect personal data when individuals: 

  • Visit our website 

  • Contact us 

  • Subscribe to our newsletters and marketing communications 

  • Register for events 

  • Engage with us as clients, prospective clients, associates, suppliers, partners or stakeholders 

  • Apply for employment, consultancy or associate opportunities 

  • Otherwise interact with Mutual Ventures 

We process personal data in accordance with: 

  • UK General Data Protection Regulation (UK GDPR) 

  • Data Protection Act 2018 

  • Data (Use and Access) Act 2025 

  • Privacy and Electronic Communications Regulations (PECR) 

  • Applicable Information Commissioner's Office (ICO) guidance 

 

2. Who We Are 

Mutual Ventures Limited is a socially focused management consultancy working across the public, private, voluntary and charity sectors. Mutual Ventures Limited is registered with the Information Commissioner's Office (ICO) under registration number Z3350822.  

​

Data Controller 

Mutual Ventures Limited 
2-6 Boundary Row 
London 
SE1 8HP 

Email: info@mutualventures.co.uk  

 

Data Protection Lead 

Mutual Ventures has appointed a Data Protection Lead responsible for overseeing data protection compliance and handling privacy-related enquiries. 

Email: balgees.barendilla@mutualventures.co.uk  

Subject Line: Data Protection Enquiry 

​

3. Personal Data We Collect 

Depending on your relationship with us, we may collect and process the following categories of personal data. 

Identity Data 

  • Name 

  • Job title 

  • Employer or organisation 

  • Professional profile information 

Contact Data 

  • Email address 

  • Telephone number 

  • Postal address 

Communications Data 

  • Contact form submissions 

  • Emails and correspondence 

  • Meeting notes 

  • Enquiries and requests 

  • Newsletter subscription preferences 

​

Event Registration Data 

Where individuals register for events, webinars, roundtables, workshops or conferences organised by Mutual Ventures, we may collect: 

  • Name 

  • Organisation 

  • Job title 

  • Email address 

  • Telephone number 

  • Attendance records 

  • Accessibility requirements 

  • Dietary requirements 

Where special category data is provided, we will only process it where an appropriate lawful basis and condition for processing applies.  

Technical Data 

  • IP address 

  • Browser type and version 

  • Device information 

  • Operating system 

  • Referring website information 

Cookie and Analytics Data 

  • Website interactions 

  • Visit duration 

  • Pages viewed 

  • Navigation behaviour 

  • Consent preferences 

Recruitment Data 

Where individuals apply for employment, consultancy or associate opportunities, we may process: 

  • CVs 

  • Application forms 

  • Employment history 

  • Qualifications 

  • References 

  • Interview notes 

Supplier and Associate Data 

  • Business contact details 

  • Contract information 

  • Financial and invoicing information 

  • Professional credentials 

We do not knowingly collect personal data from children through our website. 

 

4. How We Collect Personal Data 

We collect personal data: 

  • Directly from you 

  • Through website forms 

  • Through newsletter sign-up forms 

  • Through event registration forms 

  • Through business correspondence 

  • Through networking and business development activities 

  • Through recruitment processes 

  • Through publicly available professional sources 

  • Through cookies and similar technologies 

5. Purposes and Lawful Bases for Processing 

We must have a lawful basis under UK GDPR for processing personal data. 

 

Purpose 

Categories of Data 

Lawful Basis 

Responding to enquiries 

Identity, Contact, Communications 

Legitimate Interests 

Managing client relationships 

Identity, Contact, Communications 

Contract and Legitimate Interests 

Delivering consultancy services 

Relevant client-related data 

Contract 

Supplier and associate management 

Contact and financial data 

Contract 

Recruitment activities 

Recruitment data 

Contract and Legitimate Interests 

Event registration and administration 

Identity, Contact and Event Registration Data 

Legitimate Interests and, where applicable, Contract 

Sending newsletters 

Contact Data 

Consent 

Business development communications 

Contact and professional information 

Legitimate Interests, subject to PECR 

Website administration and security 

Technical Data 

Legitimate Interests 

Website analytics 

Analytics Data 

Consent where required 

Compliance with legal obligations 

Relevant personal data 

Legal Obligation 

Legal proceedings and claims 

Relevant personal data 

Legitimate Interests and Legal Obligation 

 

Where special category personal data is processed, an additional lawful condition under Article 9 UK GDPR and Schedule 1 Data Protection Act 2018 will be identified.  

​

6. Marketing Communications 

Where required by law, we will seek your consent before sending marketing communications. You may unsubscribe at any time by: 

  • Clicking the unsubscribe link in any marketing email 

  • Contacting us using the details within this notice 

Withdrawal of consent will not affect processing carried out prior to withdrawal. 

 

7. Cookies and Similar Technologies 

Our website uses cookies and similar technologies to provide services and improve the user experience. These may include: 

Strictly Necessary Cookies 

Required for the website to function. 

Analytics Cookies 

Used to understand how visitors interact with the website. 

Functional Cookies 

Used to remember settings and preferences. 

Marketing Cookies 

Used where applicable to support communication and engagement activities. 

 

Where required by law, non-essential cookies are only activated after consent has been obtained. 

 

Users may withdraw consent at any time through cookie preference settings. 

Mutual Ventures regularly reviews the cookies and similar technologies used on its website and aims to maintain an up-to-date inventory identifying: 

  • Essential cookies 

  • Analytics cookies 

  • Functional cookies 

  • Marketing cookies 

  • Third-party cookies 

You can learn more about cookies through: 

The organisation will periodically review cookie consent mechanisms to ensure compliance with PECR and ICO guidance.  

 

8. Analytics 

We use Google Analytics and similar tools to understand website usage and improve the effectiveness of our website. 

Analytics information may include: 

  • Device information 

  • Website interactions 

  • Traffic patterns 

  • Technical usage information 

  • Location 

Where required, analytics cookies will only be used with consent. 

 

9. Third-Party Processors and Service Providers 

Mutual Ventures uses trusted third-party providers to support business operations and service delivery. Depending on the services used, personal data may be processed by: 

  • Wix (website hosting and website functionality) 

  • Google Analytics 

  • Microsoft 365 

  • Mailchimp or equivalent email marketing providers (where used) 

  • Microsoft Forms (where used) 

  • Eventbrite or equivalent event management platforms (where used) 

  • Professional advisers including legal and financial advisers 

  • IT support providers and cloud service providers 

We require all processors to implement appropriate technical and organisational security measures and to process personal data only in accordance with our documented instructions. The providers used may change from time to time as our systems and services evolve. 

 

10. Website Hosting 

Our website is hosted through Wix.com. Information submitted through website features may be stored using Wix infrastructure and services. Wix maintains security controls designed to protect personal data and further information is available through Wix's privacy documentation. 

​

11. International Transfers 

Some suppliers and service providers may process personal data outside the United Kingdom. Where transfers occur, we implement appropriate safeguards including: 

  • UK International Data Transfer Agreement (IDTA) 

  • UK Addendum to Standard Contractual Clauses 

  • UK adequacy regulations 

  • Other lawful transfer mechanisms permitted by UK data protection legislation 

Individuals may request further information regarding transfer safeguards by contacting the Data Protection Lead. 

​

12. How Long We Keep Personal Data 

Mutual Ventures retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, contractual and regulatory obligations. 

 

Typical retention periods are: 

 

Record Type 

Retention Period 

Website enquiries 

2 years from last contact 

Newsletter subscriptions 

Until unsubscribe or consent withdrawal 

Event registrations 

2 years after event completion 

Recruitment applications 

1 year after recruitment exercise 

Supplier and associate records 

6 years after relationship ends 

Client records 

6 years after contract completion unless a longer period is required 

Website analytics data 

In accordance with platform settings and operational requirements 

 

Retention periods may be extended where required: 

  • To comply with legal obligations 

  • To establish, exercise or defend legal claims 

  • For regulatory requirements 

Records will be securely deleted, destroyed or anonymised once no longer required.  

 

13. Your Data Protection Rights 

Subject to applicable legal exemptions, you may have the right to: 

  • Be informed about how your data is used 

  • Access your personal data 

  • Request rectification of inaccurate data 

  • Request erasure of personal data 

  • Restrict processing 

  • Object to processing 

  • Receive data in a portable format where applicable 

  • Withdraw consent at any time 

  • Request review of certain automated decisions 

Subject access requests are normally provided free of charge. A fee may only be charged where permitted by applicable data protection legislation.  

Requests should be sent to: 

info@mutualventures.co.uk  

We may require proof of identity before responding. 

 

14. Automated Decision-Making and Artificial Intelligence 

Mutual Ventures does not currently make decisions about individuals solely by automated means that produce legal or similarly significant effects. Mutual Ventures may use approved AI-assisted technologies to support drafting, research, administrative activities and service delivery. Personal data processed through such tools is managed in accordance with applicable data protection legislation, contractual requirements and internal governance controls. Should automated decision-making be introduced in future, affected individuals will be provided with the information and safeguards required by applicable law. 

 

15. Data Security 

Mutual Ventures maintains appropriate technical and organisational measures to protect personal data against: 

  • Unauthorised access 

  • Loss 

  • Destruction 

  • Alteration 

  • Disclosure 

  • Misuse 

Access is restricted to authorised individuals who require information for legitimate business purposes. 

 

16. Complaints 

If you have concerns about how we process your personal data, please contact us in the first instance so that we can investigate and attempt to resolve the matter. 

 

Email: info@mutualventures.co.uk  

 

You also have the right to complain to the Information Commissioner's Office (ICO): 

 

Information Commissioner's Office 
Wycliffe House 
Water Lane 
Wilmslow 
Cheshire 
SK9 5AF 

Website: https://www.ico.org.uk  

 

17. Making a Data Protection Complaint 

If you are dissatisfied with how Mutual Ventures has handled your personal data or exercised your rights, you may submit a formal data protection complaint. 

Complaints may be submitted: 

  • By post to the address listed in this Privacy Notice 

Upon receipt of a complaint, Mutual Ventures will: 

  • Acknowledge the complaint without undue delay 

  • Investigate the issues raised 

  • Keep you informed of progress where appropriate 

  • Seek to resolve the matter fairly and promptly 

  • Provide a response as soon as reasonably practicable and normally within 30 days 

Where a complaint identifies a potential compliance issue, appropriate corrective action will be considered and recorded. 

 

If you remain dissatisfied following our response, you have the right to complain to the Information Commissioner's Office (ICO).  

 

18. Links to Other Websites 

Our website may contain links to external websites. This Privacy Notice applies only to the Mutual Ventures website. We encourage users to review the privacy notices of any external websites they visit. We are not responsible for the privacy practices or content of third-party websites. 

19. Changes to This Privacy Notice 

We may update this Privacy Notice periodically to reflect: 

  • Changes in legislation 

  • Regulatory guidance 

  • Organisational practices 

  • Technological developments 

The latest version will always be published on our website. Where material changes are made, we will take reasonable steps to make affected individuals aware of the changes. 

 

20. Contact Us 

If you have any questions about this Privacy Notice or wish to exercise your data protection rights, please contact: 

 

Email: info@mutualventures.co.uk 

 

Postal Address: 
Mutual Ventures Limited 
2-6 Boundary Row 
London 
SE1 8HP 

bottom of page