Legal
Privacy Policy
Last updated: 23 March 2026
Who we are
This website is operated by UNFYS Consulting Ltd, a company registered in England and Wales. When this policy refers to "I", "me", or "UNFYS", it means UNFYS Consulting Ltd and its sole director, Ben Zarif.
For the purposes of data protection law, UNFYS Consulting Ltd is the data controller of any personal data collected via this website.
Contact: via the contact form on this website.
What data I collect and why
Contact form submissions
When you submit the contact form, I collect:
- Your name
- Your company name
- Your role (optional)
- Your email address
- How you found me (optional)
- Your message
Purpose: To respond to your enquiry and, if appropriate, to conduct pre-engagement discussions.
Legal basis: Legitimate interests (responding to direct enquiries from prospective clients).
Newsletter signup
If you subscribe to my newsletter, I collect your name (optional) and email address.
Purpose: To send you occasional written content on topics relevant to B2B revenue leadership.
Legal basis: Consent. You can withdraw consent and unsubscribe at any time via the link in any email I send.
Analytics (if enabled)
If you have accepted cookies, I use Google Analytics 4 to collect anonymised information about how visitors use this website — pages visited, time on site, general geographic region, and device type. No personally identifiable information is collected through analytics.
Purpose: To understand how the website is being used and improve it.
Legal basis: Consent (via the cookie banner).
How I use your data
I use the data I collect only for the purposes described above. I will not:
- Sell your data to third parties
- Use your data for automated decision-making or profiling
- Send you unsolicited marketing without your consent
- Transfer your data outside the UK/EEA without appropriate safeguards
Third parties
Contact form and newsletter data is transmitted to a third-party webhook service (such as Zapier or Make) for the purpose of routing the submission into a CRM or mailing list tool. These services process data on my behalf under their own terms and data processing agreements.
If Google Analytics is enabled, data is processed by Google LLC in accordance with Google's privacy policy and their compliance with UK GDPR adequacy decisions.
How long I keep your data
- Contact enquiries: For as long as reasonably necessary to respond and for a period after to maintain records of commercial correspondence — typically up to 3 years.
- Newsletter subscribers: Until you unsubscribe or request removal.
- Analytics data: Per Google Analytics retention settings, typically 14 months.
Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data I hold about you
- Rectification — ask me to correct inaccurate data
- Erasure — ask me to delete your data where there's no compelling reason to keep it
- Restriction — ask me to limit how I use your data
- Portability — receive your data in a portable format
- Object — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact me via the contact form. I'll respond within 30 days.
If you're not satisfied with my response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Cookies
This website uses cookies. See the Cookie Policy for full details.
Security
I take reasonable technical and organisational measures to protect personal data from loss, misuse, and unauthorised access. This website is served over HTTPS. Form submissions are transmitted securely.
Changes to this policy
I may update this policy from time to time. If there are material changes, I'll update the "last updated" date at the top. Continued use of the website after changes constitutes acceptance of the updated policy.
Contact
If you have questions about this policy or how I handle your data, use the contact form.