Privacy notice
What Strachan Consultancy Limited holds about you, why, and what you can do about it.
Last updated 16 September 2026.
Who we are
Strachan Consultancy Limited is the data controller. That means we decide what personal information is held and what it is used for.
Company number SC781194, registered in Scotland. Office 2:6, 1 Redwood Crescent, Glasgow, South Lanarkshire, G74 5PA.
For anything in this notice, write to Mark Strachan at the email address on our contact page.
The four kinds of people this covers
This notice covers four different situations, and what we hold is different in each.
1. You visit this website. We hold very little, and most of it is not personal to you.
2. You get in touch. You book a call, complete the scorecard, download something or send an email.
3. You become a client. You buy Three Years Out or engage us on a buy-side mandate, and we hold detailed information about your business and your own financial position.
4. Somebody else gives us information about you. Usually because they are a client and you are their fellow shareholder. You may never have dealt with us at all. That situation has its own section below, because it is the one where you have the least control and the most reason to want to know.
1. If you visit this website
When you visit this site, the company that hosts it receives standard technical information, including your IP address and browser, so that it can deliver the pages to you.
We also count visits with a website statistics service that sets no cookies and stores nothing on your device. It tells us, in totals only, which pages are read, which country visitors are in, what kind of device they use and how they arrived. It does not identify you. We use it to understand what people read and to improve the site.
We rely on our legitimate interest in running and improving the site.
2. If you get in touch
Depending on how you contact us, we may hold your name, business name, email address, telephone number, the size and sector of your business, your timescale for an exit, what you told us you wanted from the conversation, and your answers if you completed the scorecard.
Why we hold it. To answer you, to prepare properly for a call rather than wasting your half hour, and to keep a record of what was discussed.
Our legal basis is our legitimate interest in responding to an enquiry you made. Where you ask to be sent things, we rely on your consent, and every email we send you carries a one-click unsubscribe.
We do not buy lists and we do not sell yours.
3. If you become a client
This is where we hold a great deal, and you should know what before you send it.
About your business: three years of statutory accounts, management accounts, nominal ledgers and trial balances, sales and purchase ledgers, payroll summaries, contracts, leases, insurance and certification documents, and anything else on the data request.
About you personally: what you need to walk away with after tax, your other assets and obligations to the extent you choose to tell us, your intentions for the business and your own timescale. This is the most personal information we hold about anyone.
Why we hold it. Because we cannot produce your assessment, your valuation range, your Repair List or your roadmap without it. Our legal basis is the contract between us. If you do not provide it we cannot do the work, and the Booking Terms say so.
What we never do with it. We never use it for our own commercial advantage, and we will never act for anyone seeking to acquire your business, at any time and for any fee. That is a term of the Confidentiality Undertaking you sign before you send us anything.
4. If somebody else gave us information about you
This section is for people who have never contacted us
If you are a shareholder, director or senior employee of a business that has engaged us, we probably hold information about you that we received from that business rather than from you.
That may include your name and role, your shareholding, what you are paid, your service contract, and in the case of shareholders, what a sale would mean for you personally.
Where it came from. From the business that engaged us, as part of the information it is contractually required to provide so that we can do the work it has asked for.
Our legal basis is our legitimate interest, and the interest is the business's rather than ours: it cannot plan an exit that works for its shareholders without knowing what each of them needs. We have weighed that against your privacy, and we hold the minimum needed to do the work.
You have exactly the same rights as anyone else in this notice, including the right to ask what we hold, the right to have it corrected, and the right to object to us holding it at all. Those are set out below and you can use them whether or not you are our client.
Who else sees it
We use ordinary business software to run the practice. Every provider processes your information on our instructions and on no other basis, none of them may use it for their own purposes, and none of them is permitted to use it to train its systems.
The kinds of provider we use are: our email and file storage; the system that holds our client records, calendars and invoicing; our payment processor, which holds card details so that we do not; our email sending provider; the host of this website; our website statistics service; our domain and network provider; and the platform behind the scorecard.
We also share information with our own accountants, insurers and professional advisers where they need it, and with anyone else only where you tell us to or the law requires it.
Some of these providers hold information outside the United Kingdom. Where that happens, it is covered by the safeguards those providers are required to have in place.
How long we keep it
You can ask us to delete information sooner and we will unless we are required to keep it.
How it is kept
Your information is held in the business systems named above, each protected by access controls and multi-factor authentication. Files are stored in encrypted cloud storage rather than on local machines.
We do not hold your card details at any point. Card payments are taken by our payment processor, which holds them.
If you think your information has been lost or seen by someone who should not have seen it, tell us immediately and we will tell you what happened.
Your rights
You can ask us to show you what we hold, correct it, delete it, restrict what we do with it, or send it to you or somebody else in a portable form. You can object to us holding it. Where we rely on your consent, you can withdraw it at any time.
Write to us and we will answer within one month. We do not charge for this.
If you are not happy with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk, and you can do that whether or not you have complained to us first.
Cookies
This site sets no cookies and stores nothing on your device, so there is nothing to accept or decline.
If that changes, we will update this section first and, where the law requires it, ask for your consent before anything is stored.
Changes
If this notice changes we will post the new version here and change the date at the top. If the change is significant and we hold your information, we will tell you.
