Privacy policy
Last updated: 14 October 2026
1. Who we are
This website is operated by Marathon Consultancy Services Ltd (“Marathon”, “we”, “us”, “our”), company number 17420871, registered address Unit 15 Neptune Court, Vanguard Way, Cardiff, CF24 5PJ. Marathon is the data controller for the personal data described in this policy.
Contact: greg@
2. What personal data we collect
We collect personal data in the following ways:
- Contact form: when you submit an enquiry through our website, we collect your name, email address, organisation, location and the type of help you need, plus any other information you choose to include in your message (which may include your phone number).
- Automatically collected data: when you visit our website, certain technical information may be collected automatically, such as your IP address, browser type, device type, and pages visited.
- Analytics: with your consent, we use Google Analytics to understand how visitors use our website, such as the pages viewed, time spent on the site and the website that referred you. See our Cookie Policy for details.
3. How we use your data
We use the personal data we collect for the following purposes, and on the following legal bases under UK GDPR:
- To respond to your enquiry and discuss a potential engagement. Legal basis: legitimate interests (responding to enquiries you have initiated).
- To provide our consultancy services once engaged. Legal basis: performance of a contract.
- To comply with our legal and tax obligations (e.g. invoicing records). Legal basis: legal obligation.
- To send you marketing or follow-up communications, only where you have given consent. Legal basis: consent. You may withdraw this consent at any time.
4. How long we keep your data
- Enquiries that do not proceed to an engagement: retained for 12 months from the date of your enquiry, then deleted.
- Client and contract records: retained for 6 years after the end of the engagement, in line with UK tax and accounting record-keeping requirements.
5. Who we share your data with
We do not sell your personal data. We may share it with trusted third parties who help us run our business and website, for example:
- Our website hosting provider: Vercel Inc., managed on our behalf by Seven Marketing
- Our website form email delivery service: Resend
- Our email provider: Fasthosts
- Our website analytics provider: Google Analytics (Google LLC).
- Our appointment booking service: Calendly (Calendly LLC), if you choose to book a call through our website.
Each third party is only permitted to use your data to provide the relevant service to us, and is required to protect it appropriately. Where a provider is based outside the UK (for example in the United States), we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
6. Cookies
Our website may use cookies and similar technologies. Full details are set out in our separate Cookie Policy.
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data, in certain circumstances.
- Object to or restrict certain processing.
- Request a copy of your data in a portable format.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact us at greg@
8. How we protect your data
We take reasonable technical and organisational measures to protect the personal data we hold against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
9. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top of this page shows when it was last revised. We encourage you to review this page periodically.
10. Contact us
If you have any questions about this policy or how we handle your data, please contact Greg Spanner, Marathon Consultancy Services, at greg@