Privacy Policy

Sophos Board Advisory
Effective Date: 1st September 2025
Last Updated: 1st September 2025

Who We Are

Sophos Board Advisory is a sole trader business based in Scotland, United Kingdom, providing non-executive director and governance advisory services.

Contact Details:

Email: murray@sophosboard.com
Website: sophosboard.com

What Personal Information We Collect

We may collect and process the following personal information:

Information You Provide Directly

Contact Information: Name, email address, phone number, business address
Professional Information: Job title, company, LinkedIn profile, CV/resume
Communication Records: Email correspondence, meeting notes, consultation records
Business Requirements: Information about your organisation's governance needs

Information Collected Automatically

Website Analytics: IP address, browser type, pages visited, time spent on site
Cookies: Essential cookies for website functionality (see Cookie Policy below)

How We Use Your Personal Information

We process your personal information for the following purposes:

Legitimate Business Interests

Service Delivery: Providing governance advisory and NED services
Business Development: Identifying potential collaboration opportunities
Professional Networking: Maintaining business relationships
Website Improvement: Analysing website usage to enhance user experience

Legal Obligations

Record Keeping: Maintaining business records as required by law
Regulatory Compliance: Meeting professional and regulatory obligations

With Your Consent

Marketing Communications: Sending newsletters or updates (where consented)
Event Invitations: Inviting you to relevant professional events

Legal Basis for Processing

We process your personal information under the following legal bases:

Legitimate Interests: For business operations and professional networking
Contract Performance: When providing services to you
Legal Obligation: To comply with regulatory requirements
Consent: For marketing communications (where applicable)

How We Share Your Information

We may share your information with:

Professional Service Providers

Executive Search Firms: When relevant opportunities arise
Legal/Professional Advisors: For business advice and compliance
IT Service Providers: For website hosting and technical support

Legal Requirements

Regulatory Bodies: Where required by professional obligations
Legal Authorities: When required by law or court order

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Data Retention

We retain your personal information for as long as necessary to:

Fulfil the purposes for which it was collected
Comply with legal and regulatory obligations
Resolve disputes and enforce agreements

Typically, we retain contact information for 7 years after last contact, unless you request earlier deletion.

Your Rights

Under UK GDPR, you have the following rights:

Access: Request a copy of your personal information
Rectification: Correct inaccurate or incomplete information
Erasure: Request deletion of your personal information
Restriction: Limit how we process your information
Portability: Receive your information in a structured format
Objection: Object to processing based on legitimate interests
Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at murray@sophosboard.com.

Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

Secure email communications
Password-protected systems
Regular security reviews
Limited access to personal information

International Transfers

Your personal information is processed within the UK. If we need to transfer information internationally, we will ensure appropriate safeguards are in place.

Our website uses essential cookies only:

Functional Cookies: Enable basic website functionality
Analytics: Anonymous usage statistics to improve our website

You can control cookies through your browser settings.

For any privacy-related questions or to exercise your rights:

Email: murray@sophosboard.com
Subject Line: Privacy Enquiry

Changes to This Policy

We may update this privacy policy from time to time. We will post any changes on our website and update the "Last Updated" date.

This privacy policy complies with UK GDPR and Data Protection Act 2018.