Your information is handled for a clear business purpose.

Abner Consulting Limited is responsible for the personal information described in this policy. It applies to this website, consultation requests, and pre-engagement communications. A separate engagement notice or agreement may provide additional information if you become a client or if a particular regulated process applies.

This website is intended for business users and adults. It is not directed at children, and we do not knowingly request personal information from children through the consultation flow.

We collect only information reasonably connected with understanding an enquiry, providing an agreed service, protecting the website, or meeting a legal obligation.

The lawful basis depends on the purpose and the law that applies. We do not rely on consent where another lawful basis properly applies, and a website enquiry does not enrol you in marketing.

We do not sell personal information. We share it only where needed for a stated purpose, an agreed service, or a legal requirement, and we seek appropriate confidentiality and data-protection commitments from service providers.

Abner Consulting supports international requirements, so information may be processed outside your country when a hosting provider, service partner, authority, or requested jurisdiction is located elsewhere. Where data-protection law requires it, we use an available lawful transfer mechanism and proportionate safeguards, or rely on another permitted basis for the transfer.

The exact recipients and countries can depend on the jurisdiction and service you request. Material service-specific sharing should be explained during scoping or in the engagement documentation.

An initial enquiry that does not become an engagement is generally kept for no longer than 12 months after the last meaningful contact, unless a shorter period is appropriate or longer retention is required to manage a complaint, legal claim, abuse, or legal obligation.

If you become a client, records are kept for the period needed to perform the engagement and then in line with applicable company, tax, accounting, KYC, anti-money-laundering, limitation, insurer, and professional record-keeping requirements. When information is no longer required, we delete it, anonymise it, or securely restrict it until deletion is possible.

We use proportionate organisational and technical measures designed to protect personal information from unauthorised access, alteration, disclosure, loss, or misuse. Measures can include access controls, secure hosting, data minimisation, controlled provider access, validation, rate limits, and confidential handling procedures.

No internet transmission or storage system can be guaranteed completely secure. Do not send passports, identity documents, bank credentials, payment-card details, or other highly sensitive material through the initial enquiry form. If such information is later required, the collection method and purpose should be explained separately.

Depending on your location and the law that applies, you may have rights to be informed, request access, correct inaccurate information, request deletion or restriction, object to certain processing, receive portable data, withdraw consent, and complain to a privacy or data-protection authority. These rights can be subject to lawful exceptions.

Use the Contact page to make a privacy request. We may need to verify your identity before acting, and we will not ask for more verification information than is reasonably necessary. You may also complain to the supervisory authority in your country; UK users can contact the Information Commissioner’s Office.

We may update this policy when the website, services, providers, or applicable requirements change. The date at the top shows the current published version. Material changes should be communicated through an appropriate website notice or direct message where required.

For a privacy question, request, or complaint, contact Abner Consulting Limited through the website Contact page and state that the message concerns privacy. This route is used until verified public email and registered-office details are published.