Privacy Policy

Last Updated: 7 September 2026

1. Introduction

Welcome to The Flying Fish Company (“we,” “us,” “our”). The Flying Fish Company is operated by Helen McMenamin. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your information when you visit our website, www.theflyingfishcompany.co.uk (“Website”), contact us, download our resources or use our services.

The Flying Fish Company is registered with the Information Commissioner’s Office (ICO).

📌 ICO Registration Reference: ZC163453

Helen McMenamin has also completed the ICO Data Protection Essentials training programme in August 2026. This training supports our commitment to responsible data handling and does not constitute ICO accreditation or endorsement.

For any privacy-related questions, contact us at:

📧 Email: helen@theflyingfishcompany.co.uk

2. Information We Collect

We may collect and process the following types of personal data:

(a) Information You Provide Directly

Contact details (e.g., name, email address, telephone number, job title, organisation) when you contact us, complete a form or enquire.

Training and booking information when you enquire about or arrange training, consultancy or other services.

Resource and toolkit information (e.g., first name and email address) when you request access to a free resource.

Marketing preferences when you choose whether to receive news, resources, training updates or other communications.

Feedback and testimonials where you choose to provide identifying information such as your name, job title or organisation.

Payment and invoicing information where required for providing a service. Payments may be processed securely through trusted third-party providers.

Any other information you voluntarily provide to us.

Where feedback or evaluation information is genuinely anonymous, and an individual cannot reasonably be identified from it, it is not treated as personal data.

Because our work relates to bereavement, wellbeing and workplace support, you may occasionally choose to provide information about your health, disability, beliefs or personal circumstances. We do not routinely ask for sensitive personal information unless it is necessary, for example to arrange an accessibility adjustment.

(b) Information We Collect Automatically

When you visit our Website, we may collect:

Cookies & Tracking Data: IP address, browser type, device information and pages visited (see our Cookie Policy for details).

Analytics Data: Information about how visitors use our Website, where appropriate and subject to your cookie preferences.

(c) Information Received From Other Sources

We may occasionally receive professional contact information from another source, for example:

an organisation arranging training;

another professional contact;

publicly available professional or business information; or

a third party with an appropriate basis for sharing the information.

Where required, we will provide information about the type of personal data received and where it came from.

3. How We Use Your Information

We use your data for the following purposes:

✅ Providing Services: Responding to enquiries, arranging and delivering training, consultancy and other services.

✅ Providing Resources: Giving you access to toolkits, downloads or other resources you have requested.

✅ Business Administration: Managing bookings, professional correspondence, invoices, payments and appropriate business records.

✅ Improving Our Services: Reviewing feedback, evaluation information and website usage to improve our training, resources and Website.

✅ Marketing & Communication: Sending newsletters, resources, training updates and promotional content where we have an appropriate basis to do so.

✅ Accessibility & Support: Responding to information you provide about accessibility or reasonable adjustment requirements.

✅ Legal & Security Purposes: Protecting our Website and systems, preventing or detecting fraud, complying with legal obligations and establishing or defending legal rights where necessary.

We do not sell or rent your personal data.

4. Legal Basis for Processing Data (UK GDPR Compliance)

We only process personal data where we have an appropriate lawful basis. Depending on why we are using your information, this may include:

Consent: When you choose to receive marketing communications, provide permission for certain uses of identifiable feedback or testimonials, or consent to non-essential cookies.

Contractual Necessity: When processing your information is necessary to enter into or fulfil a contract with you.

Legal Obligation: Where we are required to process or retain information by UK law, including certain financial, tax and accounting records.

Legitimate Interests: Where processing is reasonably necessary for the operation of our business and does not override your rights. This may include responding to enquiries, communicating with professional contacts, providing requested resources, maintaining appropriate business correspondence, improving our services and protecting our Website and systems.

Where we rely on consent, you can withdraw that consent at any time.

📌 Free Resources and Toolkits

Providing your name and email address to access a free resource does not automatically subscribe you to marketing communications.

Where you are offered a separate option to receive news, course information, resources or other updates, you will only be added to that mailing list where you have chosen to opt in, where consent is the basis being relied upon.

You can unsubscribe from marketing communications at any time.

5. How We Store & Protect Your Data

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration or loss.

📌 Data Storage:

Information may be stored securely through trusted websites, email, email marketing, cloud storage, booking, accounting or other service providers.

Where third-party providers process personal information on our behalf, appropriate contractual and data protection arrangements are used.

Payment information may be handled by trusted third-party payment providers and is not unnecessarily retained by us.

We limit the personal information we collect and retain to what is reasonably necessary.

Some trusted service providers may process or store information outside the UK. Where this constitutes a restricted international transfer, appropriate safeguards will be used in accordance with UK data protection law.

📌 Data Retention:

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Business and client correspondence may be retained for an appropriate period for administration, record keeping or legal purposes.

Financial and accounting records are retained for the period required by applicable law.

Marketing information: We may retain your details while you remain subscribed, together with appropriate records of your consent or request not to receive marketing.

Information relating to accessibility or sensitive personal circumstances will not be retained longer than reasonably necessary for the purpose for which it was provided.

Information that is no longer required will be securely deleted or anonymised where appropriate.

6. Your Data Protection Rights (Under UK GDPR)

Depending on the circumstances, you may have the right to:

✅ Access: Request a copy of the personal data we hold about you.

✅ Correction: Ask us to correct inaccurate or incomplete information.

✅ Deletion (Right to be Forgotten): Request deletion of your information in certain circumstances.

✅ Withdraw Consent: Withdraw consent at any time where consent is the lawful basis we rely upon.

✅ Object to Processing: Object to certain uses of your information, including direct marketing.

✅ Restrict Processing: Ask us to restrict how your information is used in certain circumstances.

✅ Data Portability: Request certain information in a structured, commonly used and machine-readable format where this right applies.

Not all rights apply in every circumstance.

📌 How to Exercise These Rights?

Contact us at helen@theflyingfishcompany.co.uk with the subject “Data Request”.

We will normally respond within the timeframe required by data protection law.

If you are unhappy with how we have handled your personal information, you can contact us using the details above. You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to support the operation of our Website and understand how it is being used.

📌 Key Points:

Some cookies are essential for the Website to function.

Non-essential cookies, including certain analytics cookies, require appropriate consent.

Full details are available in our Cookie Policy.

You can manage your cookie preferences through the Website’s cookie consent controls.

8. Third-Party Services & Links

We use trusted third-party services where necessary to operate our business. These may include:

website and form providers;

email and email marketing providers;

cloud storage and productivity services;

analytics providers;

payment and accounting providers; and

video-conferencing or online training platforms.

Where these organisations process personal data on our behalf, they may act as data processors and are expected to handle information appropriately and securely.

We may also disclose personal information where required or permitted by law, including for safeguarding purposes, preventing or detecting crime, responding to lawful requests from authorities or establishing or defending legal rights.

Our Website may also contain links to external websites. We are not responsible for how those organisations collect or use your personal information. Please review their privacy policies separately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, systems, legal requirements or the way we process personal information.

The latest version will always be available on this page.

📌 Last Updated: 7 September 2026

10. Contact Us

For any questions about this Privacy Policy, how we handle personal information or your data protection rights, contact us at: