Privacy Policy

I take your privacy seriously and am committed to handling your personal information responsibly.

This Privacy Policy explains how I collect, use, store and protect personal information when you visit shaunmcnulty.com, contact me through the website or enquire about my professional services.

My services include project and programme management, project recovery, fractional project management and selected advisory services for UK businesses.

1. Who is responsible for your information?

I am Shaun McNulty, an independent Project & Programme Manager and Project Recovery Specialist, trading as an individual in the United Kingdom.

I am the data controller for personal information collected directly through this website and through enquiries about my services.

Contact details

Shaun McNultyIndependent Project & Programme Manager and Project Recovery SpecialistUnited Kingdom

Website: https://shaunmcnulty.comEmail: info@shaunmcnulty.com

For questions about this policy or how I handle your personal information, please contact me using the email address above.

Where I work on assignments for client organisations, separate data protection responsibilities may apply to information processed within their systems.

2. What information I collect

I collect personal information that you choose to provide when contacting me or enquiring about my services.

This may include:

• Your name.
• Your organisation and job title.
• Your email address.
• Your telephone number, if provided.
• Details of your project, assignment or enquiry.
• Your preferred contact arrangements.
• Information provided during subsequent correspondence.

If you contact me about a contract or interim assignment, I may also receive information about the proposed role, organisation, working arrangements and recruitment contact.

Website information

When you visit the website, technical information may be processed by the hosting platform, including your IP address, browser type, device information, access times and technical logs.

This information may be used for website operation, security, troubleshooting and performance monitoring.

Please do not submit passwords, sensitive personal information, confidential security details or commercially sensitive project documents through the general enquiry forms.

3. How I use your information

I use personal information only where there is an appropriate business or legal reason.

Responding to enquiries

To respond to your questions, discuss your requirements, arrange conversations and provide information about my services.

Considering potential engagements

To assess project management, project recovery, fractional project management and contract or interim opportunities.

Managing professional relationships

To maintain relevant correspondence, prepare proposals and manage ongoing business communications.

Providing agreed services

To deliver contracted services and maintain appropriate records relating to those engagements.

Meeting legal obligations

To comply with applicable tax, accounting and other legal requirements.

Maintaining website security

To support the secure operation of the website and investigate suspected misuse.

I do not automatically add people who contact me to a marketing mailing list.

I will not use your enquiry details to send unrelated marketing communications without an appropriate lawful basis and compliance with applicable electronic marketing rules.

4. Lawful basis for processing

Under the UK General Data Protection Regulation (UK GDPR), I must have a lawful basis for processing personal information.

Depending on the circumstances, I may rely on the following:

Legitimate interests

To respond to professional and business enquiries, maintain appropriate correspondence, assess potential assignments and operate a secure website.

These activities support my legitimate interests in running my business and communicating with prospective clients, recruiters and professional contacts. I consider these interests against individuals' rights and reasonable expectations.

Contract or steps before entering into a contract

Where processing is necessary to take steps at your request before entering into a contract with you personally, or to perform a contract with you.

Legal obligation

Where I need to process or retain information to comply with applicable law.

Consent

Where consent is required, including for certain optional website cookies or marketing communications.

Where processing relies on consent, you may withdraw it at any time.

5. Website hosting and service providers

My website is built and hosted using Lovable.

Lovable and its underlying hosting, infrastructure and technical service providers may process limited personal information necessary to operate, secure and maintain the website.

Where you submit an enquiry form, the information may be processed through the website's configured form-handling service and forwarded to my business email.

I may also use appropriate third-party providers for:

• Business email.
• Secure document storage.
• Website security and technical support.
• Customer relationship management, if introduced.
• Website analytics, if enabled.

I only share information with service providers where reasonably necessary for the operation of my website or business.

I do not sell your personal information or share enquiry details with unrelated third parties for their own marketing purposes.

6. How long I keep your information

I retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

For general enquiries that do not result in an engagement, I will retain the information for up to 12 months after the last relevant communication, unless there is a legitimate reason or legal requirement to keep it longer.

Where an enquiry leads to a professional engagement, relevant correspondence, contracts, invoices and business records may be retained for longer where necessary to meet contractual, accounting, tax or legal obligations.

Technical website logs may be retained according to the applicable hosting and infrastructure provider's retention arrangements.

I periodically review the information I hold and delete or securely dispose of information that is no longer required.

7. How I protect your information

I take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse or disclosure.

These measures may include:

• Secure website connections.
• Account authentication and access controls.
• Restricted access to business information.
• Secure business email and document storage.
• Appropriate software and security updates.
• Review and deletion of information no longer required.

Although I take reasonable precautions, no internet-based system or electronic communication method can be guaranteed to be completely secure.

Please avoid sending confidential project documentation or sensitive information through general website forms.

8. International data transfers

Although my services are initially directed at clients in the United Kingdom, some website, email or technology service providers may process personal information outside the UK.

Where personal information is transferred internationally, I will take steps to ensure that appropriate safeguards or recognised transfer mechanisms apply, as required by UK data protection law.

You may contact me for further information about the safeguards relevant to your personal information.

9. Cookies and website analytics

This website may use cookies and similar technologies.

Essential cookies

Certain technologies may be necessary for the website to operate securely and correctly.

Optional analytics cookies

If website analytics are enabled, they may be used to understand how visitors use the website and help improve its content and performance.

Where consent is legally required for non-essential cookies or similar technologies, those technologies will not be activated before the necessary consent is obtained.

You will be provided with appropriate information and controls for managing your cookie preferences.

Further details of the cookies and technologies actually used will be provided through the website's cookie information or consent settings.

10. External websites and Medium

My website may include links to external websites, including LinkedIn and my personal Medium profile, where I publish articles about project management, project recovery and related professional topics.

When you follow an external link, the third-party website may collect information under its own privacy policy.

I do not control the privacy practices of those external websites.

I recommend reviewing their privacy information before providing personal details.

11. Your data protection rights

Under UK data protection law, you may have the following rights, depending on the circumstances:

• Right of access: To request a copy of personal information I hold about you.
• Right to rectification: To request correction of inaccurate or incomplete information.
• Right to erasure: To request deletion of your information where the relevant legal conditions apply.
• Right to restrict processing: To request that certain uses of your information are limited.
• Right to object: To object to processing based on legitimate interests in appropriate circumstances.
• Right to data portability: To receive certain information in a structured, commonly used format where the legal conditions apply.
• Right to withdraw consent: To withdraw consent where it is the lawful basis for processing.

You also have the right to object to direct marketing at any time.

To exercise any of these rights, please email:

info@shaunmcnulty.com

I may need to verify your identity before responding.

I will respond in accordance with applicable legal requirements, normally within one month of receiving a valid request, subject to any permitted extensions.

12. Complaints

If you have concerns about how I have handled your personal information, please contact me so I can investigate and respond.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)

Website: https://ico.org.uk

The ICO provides information about your rights and how to raise a complaint.

13. Automated decision-making

I do not use personal information submitted through this website to make solely automated decisions that produce legal or similarly significant effects on individuals.

Business enquiries are considered through normal professional communications.

14. Changes to this Privacy Policy

I may update this Privacy Policy to reflect changes to my services, website functionality, technology providers or legal requirements.

The latest version will be available at:

https://shaunmcnulty.com/privacy

The date at the top of the policy will indicate when it was last updated.

15. Contact

For questions about this Privacy Policy, personal information I hold or your data protection rights, please contact:

Shaun McNultyIndependent Project & Programme Manager and Project Recovery SpecialistUnited Kingdom

Email: info@shaunmcnulty.comWebsite: https://shaunmcnulty.com