Legal

Privacy Policy

Last updated: January 2025. This policy explains how CTM Consulting collects, uses, and protects personal data in accordance with UK GDPR and the Data Protection Act 2018.

Data Controller: CTM Consulting
Contact: christopher.miles@ctm-consulting.co.uk
ICO Registration: [Registration number to be inserted]

1

Who We Are

CTM Consulting is an independent digital forensic consultancy providing expert analysis and witness services to legal professionals across the United Kingdom. We are committed to protecting the privacy and confidentiality of all personal data we handle.

2

Data We Collect

We may collect the following categories of personal data:

Contact information — name, email address, telephone number, and firm or chambers name, submitted via our enquiry and instruction forms.
Case and instruction information — details about legal matters, provided to us in the context of a forensic instruction, including information about third parties involved in proceedings.
Website usage data — standard server logs including IP address and browser type, collected automatically when you visit our website.
Communications — emails and correspondence sent to us in connection with an instruction or enquiry.
3

How We Use Your Data

We use personal data for the following purposes:

Responding to enquiries and managing forensic instructions
Preparing expert reports and delivering forensic services
Complying with our legal obligations, including those arising from court proceedings
Maintaining records of instructions for professional indemnity and audit purposes

Our lawful basis for processing is typically contract (processing necessary to perform our services), legal obligation (compliance with court rules and professional obligations), or legitimate interests (operating our business and responding to enquiries).

4

Confidentiality of Instructions

All information provided in connection with a forensic instruction is treated as strictly confidential and privileged. We do not disclose case information or client details to any third party without your express written consent, except where required by law or court order.

5

Data Sharing

We do not sell or share your personal data with third parties for marketing purposes. We may share data with:

Courts, tribunals, and other parties to legal proceedings, where required by our expert witness obligations
Our professional indemnity insurer, where required for a claim or renewal
Service providers who assist with website hosting and form submission processing, under data processing agreements
6

Data Retention

We retain personal data relating to instructions for a minimum of six years following the conclusion of the matter, in accordance with our professional indemnity obligations and standard limitation periods. Website enquiry data that does not result in an instruction is deleted after 12 months. You may request deletion of your data at any time, subject to our legal obligations to retain certain records.

7

Your Rights

Under UK GDPR you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — request correction of inaccurate data
Erasure — request deletion of your personal data, subject to legal obligations
Objection — object to processing based on legitimate interests
Portability — receive your data in a structured, machine-readable format
Complaint — lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us at christopher.miles@ctm-consulting.co.uk. We will respond within one month.

8

Cookies

This website uses essential cookies only. We use a session cookie to remember your cookie consent preference. We do not use advertising, tracking, or analytics cookies. You can disable cookies in your browser settings, though this may affect site functionality.

9

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Form submissions are transmitted via encrypted connections (HTTPS). Case-related data is stored securely with access restricted to the forensic examiner.

10

Changes to This Policy

We may update this privacy policy from time to time. The current version is always published on this page with the date of the most recent update. We recommend checking this page periodically.