Privacy policy

A clear explanation of what we collect, why we collect it, and the choices you have.

Who we are and how to contact us

The Boutique Consultancy is a London commercial-strategy consultancy working with beauty, wellness and luxury brands. The Boutique Consultancy is a trading name of Boutique Management Consulting Ltd, registered in England and Wales (company number 16372133), registered office 38 Salisbury Road, Worthing, West Sussex, BN11 1RD.

For questions about this policy or how we use your personal data, email connect@theboutiqueconsultancy.com.

What data we collect

When you use our contact form, we collect the name, email address and message you provide.

Our website hosting may also create basic server logs, such as your IP address, browser type, request time and the pages requested, for security and reliable operation.

If you agree to analytics or advertising cookies, we also collect information about how you use the site: the pages you visit, how you arrived, roughly where you are, your device and browser, and an identifier that lets these tools recognise a returning visitor. We do not use this information to work out who you are by name.

We only collect information you give us directly or that is generated as you use the site. We do not buy personal data.

We do not offer user accounts.

Cookies, analytics and tracking

Cookies are small files stored on your device. We group ours into three kinds.

Essential cookies keep the site working and secure. These are always on, because the site cannot function properly without them.

Analytics cookies help us understand how the site is used so we can improve it. We use Google Analytics for this.

Advertising cookies let us measure and improve our marketing, and show our advertising to people who have visited the site. We use the Meta Pixel for this, and we may add similar tools from other advertising platforms in future.

Analytics and advertising cookies only run if you agree to them. When you first visit, you can accept or refuse them, and refusing is as easy as accepting. You can change your mind at any time using or by clearing cookies in your browser.

Where we use the Meta Pixel, we and Meta act as joint controllers for the collection of that information and its transfer to Meta. Meta is then responsible for what it does with the data afterwards, under its own privacy policy.

Why we use it and our lawful basis

We use your information to read and respond to your enquiry, continue a conversation you have asked us to have, protect the website, keep our services operating reliably, understand how the site is used, and measure our marketing.

For enquiries and site security, our lawful basis is our legitimate interest in responding to prospective clients and running a secure business.

For analytics and advertising cookies, our lawful basis is your consent. You can withdraw that consent at any time using or by emailing us, and withdrawing it will not affect anything we did before you withdrew it.

We do not use your information to make automated decisions about you.

Who we share it with

We use trusted service providers as data processors: Vercel for website hosting, Sanity for our content system, and Resend as our email provider. They process data only to provide their services to us and under their own contractual and security safeguards.

Where you have agreed to analytics and advertising cookies, information about your visit is also shared with Google (for Google Analytics) and Meta (for the Meta Pixel).

We do not share personal data with anyone else unless the law requires it, and we never sell your data.

Where your data is stored

Some of the organisations we work with are based outside the UK, or store data on servers outside the UK. Vercel and Resend are US companies, Google and Meta both process data in the US, and Sanity stores our content in the European Union. This means your information may be transferred outside the UK.

Where that happens, we make sure the transfer is covered by safeguards recognised under UK law, normally the UK International Data Transfer Agreement, or the UK Addendum to the European Commission's standard contractual clauses. We also assess the risks of a transfer before we rely on those safeguards. If you would like more detail about a particular provider, email connect@theboutiqueconsultancy.com.

How long we keep it and how we protect it

We keep enquiry information only for as long as needed to respond, manage any working relationship, meet legal or accounting duties, and resolve disputes. If an enquiry does not lead to an ongoing relationship, we will review and delete it when it is no longer useful for those purposes, and in any event within 24 months.

Analytics information is kept for up to 14 months, after which it is deleted or kept only in aggregate form that cannot be linked to an individual.

We use access controls, reputable service providers and reasonable technical and organisational safeguards to protect your information. No online service can guarantee absolute security, but we limit access to people and systems that need it.

Your rights under UK GDPR

Depending on the circumstances, you can ask us for access to your personal data, ask us to correct or delete it, restrict how we use it, object to its use, or ask for a portable copy. You can also withdraw consent where consent is our lawful basis, including for cookies.

To exercise a right, email connect@theboutiqueconsultancy.com. We may need to confirm your identity before acting on a request.

How to complain

If you are unhappy with how we have handled your personal data, please tell us first. Email connect@theboutiqueconsultancy.com with the details. We will acknowledge your complaint within 30 days, look into it without undue delay, and keep you updated if it is going to take longer than we expected.

If you are not happy with our response, you can complain to the Information Commissioner's Office. You can also go to the ICO at any point without coming to us first, visit ico.org.uk for guidance.

Last updated: 1 August 2026. If we make significant changes to this policy, we will update this page and change the date above.