Privacy Policy
Last updated: 7 August 2026
Who we are
More Than Profit Ltd is a company registered in Scotland, company number SC877077. We are the data controller for any personal data described in this policy.
You can contact us about anything in this policy at info@morethanprofit.net.
What this policy covers
This policy explains what we do with personal data when you visit morethanprofit.net or contact us. It does not cover the separate terms under which we deliver consultancy engagements — those are set out in the agreement we sign with each client organisation.
What we collect
We keep the amount of personal data we hold deliberately small.
| What | When | Why |
|---|---|---|
| Your name, organisation and email address | If you email us | To answer you and, if it goes further, to arrange an assessment |
| Anything you choose to tell us in that message | If you email us | To understand what you need |
| Standard technical information (IP address, browser type, pages requested) | Automatically, in server logs | To keep the site running securely and diagnose faults |
We do not use website analytics, advertising trackers, or social media pixels. We do not build profiles of visitors, and we do not sell or share your data for marketing.
Our lawful basis
- Legitimate interests — responding to an enquiry you have sent us, and keeping our website secure and functioning. We think you would reasonably expect both.
- Consent — if we ever add a mailing list, we will ask for your consent separately and you will be able to withdraw it at any time.
- Contract — once we are working together, to deliver the engagement we have agreed.
Who we share it with
We use a small number of established suppliers to run our business. They process data on our instructions only.
| Supplier | What they do | Where |
|---|---|---|
| Vercel | Hosts this website | Global content delivery network; data may be processed outside the UK under appropriate safeguards |
| Microsoft 365 | Our email and document storage | EU/UK data centres |
| Supabase | Database and file storage (not yet in use — will apply once client workspaces launch) | EU region |
We do not share your personal data with anyone else unless we are legally required to.
International transfers
Some of our suppliers operate outside the UK. Where personal data is transferred outside the UK, it is protected by appropriate safeguards — the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.
How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not become engagements | 24 months from last contact, then deleted |
| Client engagement records | 7 years after the engagement ends, to meet our legal and accounting obligations |
| Server logs | Typically 30 days |
Your rights
Under UK data protection law you have the right to:
- ask what personal data we hold about you, and receive a copy
- have inaccurate data corrected
- ask us to delete your data, in certain circumstances
- ask us to restrict or stop processing it, in certain circumstances
- receive your data in a portable format, in certain circumstances
- object to processing we carry out on the basis of legitimate interests
- withdraw consent at any time, where we rely on consent
To exercise any of these, email info@morethanprofit.net. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
Security
We take reasonable technical and organisational measures to protect personal data, including encrypted connections, access controls, and keeping the data we hold to a minimum. No system is completely secure, but we take this seriously — it is, after all, what we advise others on.
Changes to this policy
We will update this policy when what we do changes. The date at the top shows when it was last revised. We expect to revise it when we launch client workspaces and online assessments.