Privacy Notice

How Advocate Advisory Ltd handles the details you give us through the HCM & WFM Health Check and the contact form, and the cookies this site uses. Last updated 28/09/2026.

Who we are

Advocate Advisory Ltd is the data controller for the information described here. We are an independent HCM and workforce management consultancy based in the United Kingdom. You can reach us at info@advocateadvisory.co.uk.

What we collect through the Health Check

Your name, work email address, organisation and role.
Your sector, approximate headcount, current HCM or workforce management platform and the timescale you are working to.
Your answers to the Health Check questions, including any section you chose to mark as not applicable.
If you pass a section to a colleague: their name, work email address and any note you write to them.
Technical information sent by your browser - your IP address and user agent - recorded with the submission to help us spot abuse of the form.

We also count page views, clicks on our own links and questionnaire progress ourselves, separately from Google Analytics (see Cookies and Google Analytics below). Those counts set nothing on your device and are anonymous: each is tied to a random identifier that exists only while the page is open, is never stored on your device, and cannot identify you. Where your browser tells us which site you arrived from, we keep the name of that site and nothing more; we also record which country a visit came from, as a two-letter code, without keeping the address it was derived from, and whether the visit came from a phone, tablet or computer - nothing more precise than that. These counts are deleted within twelve months. Your draft answers are held in your own browser until you submit them, and are cleared once we confirm we have received them.

If you use the contact form

The form on the contact page asks for your name, work email address, your organisation, roughly how many employees you have, and whatever you write in the message box. Your IP address and browser user agent are recorded with it, for the same reason as above - spotting abuse of the form.

We use those details to reply to you and nothing else. Our lawful basis is our legitimate interest in responding to an enquiry you chose to send us. We keep enquiries for 12 months and then delete them. You are not added to any mailing list, because we do not have one.

If you ask for a price

The get-a-price form asks for your name, work email address, your organisation, roughly how many employees you have, your role, your phone number, and records which service you asked about. Your IP address and browser user agent are recorded with it, for the same reason as above.

We use those details to come back to you about the price you asked for and nothing else. Our lawful basis is our legitimate interest in responding to a request you chose to send us. We keep price requests for 12 months and then delete them.

Why we use it, and our lawful basis

We use your details to prepare your Health Check findings, to arrange and hold the session where we take you through them, and to contact you about that work. Our lawful basis is your consent, which you give by ticking the box when you submit the form. You can withdraw it at any time by emailing us, and we will delete your submission.

Where you nominate a colleague, we email them a link to the sections you passed on. That email names you as the person who nominated them and offers them a way to decline.

How long we keep it

We keep Health Check submissions for 24 months from the date you submit them, then delete them. If you ask us to delete your submission sooner, we will.

Who else sees it

We do not sell your details and we do not share them with HCM or workforce management suppliers. Your information is processed on our behalf by the services we use to run this site and our business:

Railway - hosting for this website. Our service runs in Railway's EU West region, in Amsterdam, the Netherlands.
Neon - the database your answers are stored in. Our database is hosted in London, in the United Kingdom.
Google Workspace - our email, handled under Google's own terms and data-protection commitments.
Google Analytics - website statistics, only if you accept analytics cookies. It does not receive anything you type into our forms.

Your answers themselves are held in the United Kingdom. The web server that receives them runs in the Netherlands, so the data passes through the European Economic Area.

Your rights

Under UK data protection law you can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to our using it, and ask for it in a portable format. Email info@advocateadvisory.co.uk and we will respond within one month.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first so we can put it right.

If you book a call

The booking page is hosted by Calendly, not by us. When you book, the name, email address and any notes you give go to Calendly and then to us. That happens on Calendly's own site under Calendly's terms and privacy notice. If you have accepted analytics cookies, Google Analytics records that you clicked through to book; it does not see what you enter on Calendly. We use what you tell us to prepare for and hold the call.

Cookies and Google Analytics

With your permission, we use Google Analytics to understand how people find and use this site: which pages they visit, how they arrived, roughly where they are, and whether they go on to book a call, send an enquiry or complete the Health Check. Google Analytics only runs if you choose Accept on the cookie banner. If you choose Reject, or make no choice, it does not load and sets no cookies. Our lawful basis is your consent.

Once you accept, Google Analytics sets these cookies:

_ga - tells one visitor apart from another. Expires after two years.
_ga_ followed by our property code - keeps track of your visit. Expires after two years.

We have switched off Google's advertising features and Google signals, so this data is not used to show you adverts. Google processes it on our behalf under Google's data processing terms, and may do so outside the United Kingdom, including in the United States. We keep Google Analytics data for no more than 14 months.

Your choice is saved in your own browser, in local storage rather than a cookie, so we do not ask again on every page. You can change your mind at any time with the Cookie settings link at the bottom of every page. If you withdraw consent, Google Analytics stops and we remove its cookies from this site.

Confidentiality

Your answers describe how your organisation operates. We treat them as confidential client material, not as marketing data. We do not reuse one organisation's answers in work for another.