Simor

Simor Consulting

Privacy

Last updated: 5 October 2026

Simor Consulting (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, and your choices. It applies to our website, communications, and any services that link to this Policy.

This Policy is designed to meet requirements of UK and EU data protection laws (UK GDPR and EU GDPR) and to provide additional disclosures for certain U.S. laws (including the CCPA/CPRA for California residents).

Controller

Simor Consulting is the controller of your personal information.

If you contact us by email about your privacy rights, we may ask for information to verify your identity before acting on your request.

Information We Collect

  • Contact details: name, work email, phone, company, role.
  • Business information: project details, interests, and messages you send via forms or email.
  • Usage data: pages viewed, links clicked, referring pages, approximate location, device/browser information.
  • Campaign source: when you send an enquiry or book a call, we record the campaign and the advert that brought you to the site, from the tags in the link you followed. This uses no cookies.
  • Cookies and similar technologies: used for site functionality, analytics, performance, and, with your consent, to measure our ads. See “Cookies & Analytics” below.

We collect information directly from you (for example, through contact and workshop request forms) and automatically when you use our site.

When you save a cost estimate or request a review on our cost pages, we receive your email address, your name and company if you give them, and your estimate answers, with the campaign source described above. One of our engineers may email you up to five times over four weeks about your estimate. Reply “stop” and we stop. We keep these emails with our other enquiries.

How We Use Information

We use personal information to:

  • Provide, operate, and improve our website and services.
  • Respond to inquiries, schedule workshops, and communicate with you.
  • Send service-related messages and updates you request.
  • Maintain security, prevent fraud/abuse, and troubleshoot.
  • Analyse site performance and usage trends.
  • Comply with legal obligations and enforce our terms.

Where UK/EU data protection law applies, we rely on these bases: (i) performance of a contract or taking steps at your request; (ii) legitimate interests (for example, to operate and improve the site, secure our services, and communicate with business contacts); (iii) consent (where required, e.g., certain cookies/marketing); and (iv) legal obligations.

Cookies & Analytics

We use essential cookies to make the site work and, where implemented, analytics cookies to understand traffic and improve performance. Where required, we will obtain your consent for non‑essential cookies. You can adjust your browser settings to refuse cookies; some features may not work without them.

If we enable analytics via Google Tag Manager (for example, a Google Analytics 4 tag), we configure tags to avoid sending personally identifiable information and, where available, to anonymise IP addresses. Analytics tags will not run until you consent to non‑essential cookies.

Advertising and ad measurement

When you select “Accept all”, you also consent to advertising cookies and ad measurement. If you reject non‑essential cookies, none of the tags below load.

  • OpenAI Ads measurement pixel. We advertise in ChatGPT. The pixel tells OpenAI when you view a page, send an enquiry or book a call, so that OpenAI can match these to clicks on our ads. It uses an ad click identifier and a random browser reference stored in cookies, and its requests carry any cookies that OpenAI has already set in your browser. When you fill in one of our forms, the pixel can also send OpenAI a one‑way coded (hashed) copy of your email address, phone number and name, to match the visit to an ad. It does not send the text you type. OpenAI reports results to us only as totals.
  • Google advertising. Our Google Analytics property is linked to a Google Ads account. With your consent, Google can use your visit to measure our Google ads and to show you our ads later (remarketing).

We do not sell your personal information. Advertising partners process data under their own terms, including OpenAI’s privacy policy and Google’s privacy policy.

Sharing Your Information

We do not sell your personal information. We may share it with:

  • Service providers that help us host, operate, analyse, or secure the site and deliver communications (under contractual confidentiality and security commitments).
  • Professional advisors, and authorities where required by law or to protect rights, safety, and security.
  • Successors in the event of a merger, acquisition, or business reorganisation.

Named processors and recipients (where used):

  • Web3Forms (form handling for contact/workshop requests) – receives the data you submit via our forms so we can process your request.
  • Cal.com (meeting scheduling) – receives the details you enter when you book a call, so that we can confirm and hold the meeting.
  • Google (Google Tag Manager, Google Analytics 4, Google Ads) – website analytics and ad measurement, only if you consent to non‑essential cookies.
  • OpenAI (OpenAI Ads measurement pixel) – measures which of our ads in ChatGPT bring visitors, enquiries and bookings, only if you consent to non‑essential cookies.
  • Email and hosting/infrastructure providers – to deliver our services and communications.

International Transfers

If we transfer personal information outside the UK/EU (for example, to service providers), we use appropriate safeguards required by law, such as UK/EU Standard Contractual Clauses or an adequacy decision. You can contact us for more information about these safeguards.

Data Retention

We keep personal information only as long as necessary for the purposes described above, to comply with legal obligations, and to resolve disputes. Typical retention periods are:

  • Contact and workshop requests: up to 24 months from last interaction.
  • Website analytics (if enabled): per tag/provider settings (for example, GA4 event‑level retention) and longer in aggregate form.
  • Ad measurement cookies: up to 30 days for the OpenAI ad click identifier, up to 365 days for the OpenAI browser reference, and per Google’s settings for Google Ads cookies. You can remove the OpenAI cookies at any time by withdrawing consent.
  • Server and security logs: up to 12 months, unless needed to investigate an issue.

Your Rights

  • UK/EU: You may have rights to access, correct, delete, restrict or object to processing, and data portability. Where we rely on consent, you may withdraw it at any time.
  • California: You may have rights to know/access, delete, correct, and opt out of certain data sharing. We do not sell personal information. We share advertising data with OpenAI and Google only if you consent to non‑essential cookies, and you can opt out at any time through Cookie Settings.

To exercise rights, contact us using the details below. We may need to verify your identity before fulfilling a request.

Automated Decision‑Making

We do not use personal information for automated decision‑making that produces legal or similarly significant effects.

Security

We implement reasonable technical and organisational measures to protect personal information. No method of transmission or storage is completely secure.

Children

Our site and services are intended for business users and are not directed to children under 16. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Policy from time to time. The “Last updated” date shows when changes were made. Material changes will be highlighted on this page.

Contact Us

If you have questions about this Policy or wish to exercise your rights:

Simor Consulting

If you are located in the UK, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk or 0303 123 1113. You can also contact your local data protection authority if you are in the EU.