Legal
Privacy Notice
Last updated: June 2026
Castro Healthcare Consulting Ltd ("we", "us", "our") is the data controller for the personal information collected through this website. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Castro Healthcare Consulting Ltd is a private limited company registered in England & Wales, company number 17216747. Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.
Castro Healthcare Consulting Ltd is registered with the Information Commissioner's Office (ICO) as a data controller, registration number ZC176589.
What we collect
This site does not host a web form. Enquiry buttons open a pre-addressed message in your own email client (to felipe@castrohealthcare.co.uk); nothing is submitted to a server we operate until you send that email. When you do choose to email us, we receive whatever you include in your message, which typically consists of:
- Your name
- Your email address (from the sending account)
- Your organisation (optional)
- The content of your message and any attachments you add
The site itself sets a small amount of first-party browser storage to make the site work: your cookie choice (chc-cookie-consent-v1, localStorage) and, if you click an enquiry button, a short-lived correlation identifier (chc-enquiry-correlation, sessionStorage) so that a support query about an enquiry can be matched to the corresponding email. Neither is used for advertising, cross-site tracking or profiling. Full details, including durations, are in the "Cookies" section below.
We do not use advertising cookies. Optional analytics cookies may be enabled only if you consent to them.
Cookies
This site uses a minimal set of cookies. They fall into two categories:
- Strictly necessary — required for the site to function, including remembering your cookie preferences. These cannot be switched off.
- Analytics (optional) — anonymous, aggregated usage data used only to help us improve the site. Off by default; enabled only with your explicit consent.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
chc-cookie-consent-v1 | Castro Healthcare Consulting (this site) | Stores your cookie preferences so the banner isn't shown again. | Persistent (until you clear browser storage) | Strictly necessary |
chc-enquiry-correlation | Castro Healthcare Consulting (this site) | Correlates an enquiry click with the resulting email, for support and analytics integrity. | Session (cleared when you close the browser tab) | Strictly necessary |
| Analytics cookies (only if you opt in) | Configured analytics provider (e.g. Plausible — cookieless — or Google Analytics) | Anonymous, aggregated usage measurement to help us improve the site. | Varies by provider; up to 24 months for Google Analytics; none for Plausible | Analytics (optional) |
For transparency, chc-cookie-consent-v1 and chc-enquiry-correlation are technically browser storage entries (localStorage and sessionStorage respectively) rather than HTTP cookies, but we list them here because PECR treats them equivalently.
No analytics provider is loaded unless you grant analytics consent. If and when one is, its specific cookies will appear in your browser under that provider's domain and follow the durations set by that provider.
When you first visit, a banner asks you to Accept all, Reject non-essential, or Customise your choice. Your decision is stored locally in your browser (key chc-cookie-consent-v1) and respected on subsequent visits. You can change your mind at any time:
To withdraw consent entirely, clear this site's storage in your browser settings; the consent banner will reappear on your next visit.
How we use it
We use your details only to respond to your enquiry and, where appropriate, to discuss potential advisory or speaking engagements. We rely on Article 6(1)(b) (steps prior to entering a contract) and 6(1)(f) (legitimate interests) of the UK GDPR as our lawful basis.
How long we keep it
Enquiry correspondence is kept for up to 24 months from the last point of contact, after which it is deleted unless we have a contractual or legal reason to retain it for longer.
Who we share it with
We do not sell or share your personal data with third parties for marketing. We may share limited information with trusted service providers (for example, email hosting) strictly to deliver our services, under appropriate confidentiality and data-protection terms.
Your rights
Under UK GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise any of these rights, email privacy@castrohealthcare.co.uk.
Data protection enquiries: privacy@castrohealthcare.co.uk.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled.
Updates to this notice
We may update this notice from time to time. Material changes will be reflected by the "last updated" date at the top of this page.