Last updated: 5 October 2026
This policy explains what personal data Basir Consulting collects, why, how long it is kept, and your rights. It applies to this website and to the work I do for clients.
Who I am
Basir Consulting is the trading name of Sohaib Basir, a sole trader based in Staines-upon-Thames, Surrey. I am the data controller for the personal data described here. You can contact me about your data through the contact page or by calling 07702 082609.
What I collect
- Enquiries: your name, email address, phone number, organisation and anything you write when you use the contact form, call, email or message me on WhatsApp.
- Bookings: your name, email address and any notes you add when you book a call.
- Client work: contact details for the people I work with, and business information you share with me, such as sales, cost and income figures. This may include personal data about your staff, customers or donors if it is in the figures you send.
- Website use: standard technical data such as your IP address, browser and the pages you visit, collected by the website platform and its statistics tools.
Why I use it, and the legal basis
- To reply to your enquiry and arrange a call: legitimate interests, or steps you have asked me to take before entering a contract.
- To deliver the work you have agreed to buy: performance of a contract.
- To invoice and keep business records: legal obligation, under tax law.
- To keep the website working and secure, and to understand how it is used: legitimate interests.
I do not sell your data, use it for automated decision-making, or add you to a mailing list without asking first.
Who I share it with
I only share your data with service providers who help me run the business, and only as far as needed:
- Automattic (WordPress.com and Jetpack), which hosts this website and its contact form
- My email, file storage and call-booking providers
- WhatsApp (Meta), if you choose to message me there
- My accountant, for invoices and tax records
Some of these providers store data outside the UK, including in the United States. Where they do, the transfer is covered by UK adequacy regulations or the International Data Transfer Agreement or its Addendum. I will also share data if the law requires it.
How long I keep it
- Enquiries that don’t lead to work: up to 2 years, then deleted.
- Client contact details and invoices: 6 years after the end of the tax year the work finished in, as tax law requires.
- Figures and files you send for a project: up to 12 months after the project ends, unless we agree otherwise, then deleted or returned.
Cookies
This website runs on WordPress.com, which uses cookies to make the site work, keep it secure and count visits. If you book a call through an embedded booking tool, that tool may set its own cookies. You can block or delete cookies in your browser settings; some parts of the site may not work properly without them.
Your rights
Under UK data protection law you have the right to:
- get a copy of the personal data I hold about you
- have inaccurate data corrected
- have your data deleted, where I have no legal reason to keep it
- restrict or object to how I use it
- receive data you gave me in a format you can pass to someone else
To use any of these rights, get in touch through the contact page. I will reply within one month. There is no charge.
Complaints
If you are unhappy with how I have handled your data, please tell me first so I can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
I will update this page if the way I handle data changes. The date at the top shows when it last changed.