Effective Date: 20/02/2026 (updated 10/08/2026)

Hatch Consultancy (“Hatch”, “we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Hatch Consultancy is an independent consultancy operating across Wales and the South West of England, focused on early careers, social value, skills and workforce strategy.

Data Controller: Hatch Consultancy Limited

Contact: info@hatch-consultancy.co.uk

Hatch Consultancy Limited (Company No. 16988422), Welsh ICE, Caerphilly, Wales, CF83 3GS

2. What Information We Collect

We may collect and process the following personal data:

●  Name

●  Job title

●  Organisation name

●  Email address

●  Telephone number

●  Information submitted via our contact forms

●  Information shared in correspondence (email, phone, meetings)

3. How We Use Your Information

We use personal data to:

●  Respond to enquiries

●  Arrange meetings and provide consultancy services

●  Manage professional relationships

●  Deliver contracted services

●  Send relevant business updates (where appropriate)

●  Meet legal or regulatory obligations

We will only process your data where we have a lawful basis to do so, including:

●  Legitimate interests (e.g. responding to enquiries)

●  Contractual necessity

●  Research, analysis, and reporting purposes, including the publication of insights and reports

●  Legal obligation

●  Consent (where required)

4. How We Store and Protect Your Data

Your data is stored securely using password-protected systems and reputable cloud-based service providers.

We take reasonable technical and organisational measures to prevent unauthorised access, loss, misuse or disclosure.

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or to meet legal requirements.

International transfers: Some of the service providers we use to store or process data (including cloud storage and software providers) may process data outside the UK, including in the United States. Where this occurs, we ensure appropriate safeguards are in place, such as reliance on adequacy regulations or standard contractual clauses (including the UK International Data Transfer Addendum).

5. Sharing Your Information

We do not sell personal data.

We may share information with trusted service providers (e.g. IT or email hosting providers) where necessary for business operations. These providers are required to handle data securely and in accordance with UK GDPR.

We may also disclose information if required by law.

6. Your Rights

Under UK data protection law, you have the right to:

●  Access your personal data

●  Request correction of inaccurate data

●  Request erasure of your data

●  Restrict or object to processing

●  Request data portability (where applicable)

●  Withdraw consent at any time (where processing is based on consent)

To exercise your rights contact: info@hatch-consultancy.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk

7. Website Cookies

Our website may use basic cookies to improve functionality and user experience. You can control cookie settings through your browser preferences.

8. Research and Survey Data

As part of our work, we may collect information through surveys and research activities, including regional early careers social value indices such as Talent Yfory.

Survey responses are collected anonymously wherever possible and are not linked to identifiable individuals unless you explicitly provide contact details (e.g. for prize draws or follow-up research).

Any personal data collected for contact purposes is stored separately and is not connected to survey responses.

We use survey data in aggregated and anonymised form for research, analysis, and reporting purposes, including the publication of insights and reports. No individuals or organisations will be identified, either directly or indirectly, in any published outputs unless explicit consent has been provided in writing.

Employer benchmark reports: Where an organisation participates by sharing this survey with its own candidates or employees, that organisation may receive a bespoke benchmark report. This report contains aggregated, quantitative data only: it does not identify individual respondents or include free-text responses, unless a different arrangement has been explicitly agreed and disclosed to participants in advance.

Special category data: Where surveys include optional questions relating to characteristics such as ethnicity or disability, this is special category data under UK GDPR. We only collect this information with your explicit consent, given at the point of completing the survey, and it is used solely to understand inclusion and access across early careers pathways. To protect anonymity, findings relating to a given characteristic are only reported where a minimum threshold of respondents share that characteristic; below this threshold, the characteristic is not reported for that group. This data is anonymised in all reporting.

9. Changes to This Notice

We may update this Privacy Notice from time to time. The latest version will always be available on our website.