Privacy Policy

Who we are

This website is operated by Annette Karseras, trading as GQ³, a leadership consultant-coach based in the United Kingdom. For the purposes of UK GDPR and the Data Protection Act 2018, Annette Karseras is the data controller for personal data collected through this website and through GQ³'s services. You can reach us using the contact details at the end of this policy.

What data we collect

Data you give us directly: when you use the contact form, get in touch, or become a client, you may provide your name, email address, phone number and the content of your message, along with any billing details needed if you become a paying client. When you submit the contact form, the details you enter are sent by email directly to Annette so she can reply. We do not use Google Analytics, Meta Pixel, or any other third-party tracking on this site.

How we use your data

We use your personal data to respond to enquiries and provide quotes, deliver the services you have asked for, manage scheduling, send invoices and process payments, keep records for tax and accounting purposes, and comply with legal obligations. We do not sell your data, and we do not share it with advertisers or data brokers for marketing purposes.

Lawful basis for processing

Under UK GDPR we rely on one of the following, depending on the situation: contract, where you are a client or prospective client and we process your data to provide the service; legitimate interests, for responding to enquiries and keeping client records; and legal obligation, for keeping financial records required by HMRC and complying with other UK laws.

Who we share data with

We share data with third parties only where necessary to run the business. These currently include Hostinger (website hosting), Google Workspace (email, including the contact-form emails, calendar and document storage), and Calendly (scheduling and bookings). Each has its own privacy obligations. Some may process data outside the UK and EU, in which case appropriate safeguards such as Standard Contractual Clauses are in place. We may also share data where legally required, for example in response to a court order.

How long we keep your data

We keep your data only as long as needed. Enquiry data is kept for up to 2 years from last contact, then deleted. Client records are kept for the duration of the working relationship, plus 7 years after the final invoice to meet HMRC requirements.

Your rights

Under UK GDPR you have the right to access a copy of the data we hold about you, to have inaccurate data corrected, to have your data erased where there is no legal reason to keep it, to restrict or object to certain processing including direct marketing, to request your data in a portable format, and to withdraw consent where we rely on it. To exercise any of these rights, email Annette.Karseras@gq3.co.uk and we will respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though we would appreciate the chance to put things right first.

Security

We take reasonable steps to protect your data, including SSL encryption on all website traffic, two-factor authentication on business-critical accounts, and careful handling of any access credentials. No system is completely secure, but we take reasonable measures to protect your data from unauthorised access, loss or misuse.

Children

Our services are aimed at organisations and professionals, not children. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, please get in touch and we will delete it.

Changes to this policy

We may update this policy from time to time. The date shown above indicates when it was last changed. Where appropriate, significant changes will be notified by email to clients.

Our wider commitments

GQ³ believes good leadership and responsibility belong together, so we aim to run this practice in a way that is good for the people we work with, the wider community and the planet, not measured by profit alone. We put people first, keep our environmental footprint low by design, work with integrity and clear pricing, and give something back to the community that sustains us. These are commitments rather than a finished achievement: we review them regularly and are working towards recognised responsible-business standards such as B Corp certification as the practice grows, and we will only claim a certification once it has genuinely been earned.