Legal
Privacy notice
What we collect, why we collect it, how long we keep it, and what you can ask us to do about it.
Last updated: 22 July 2026
Who is responsible for your data
Howard Management Ltd (“Howard Management”, “we”, “us”) is the data controller for the personal data described in this notice. That means we decide why and how it is processed.
- Registered office: 5 Brayford Square, London, E1 0SG
- Company number: 15157218
- Data protection enquiries: joe@howardmanagement.co.uk
What we collect and why
We collect as little as we can get away with. There is no account system, no profiling, and no automated decision-making of any kind.
When you email us
There is no contact form on this site. The “email us” button simply opens your own email app, and you decide what to send. When you do email us, we receive your email address, your name and whatever you choose to include, and we use it to reply and to take any next steps you’ve asked for.
| Data | Purpose | Lawful basis |
|---|---|---|
| Your email address and name | To identify you and reply to your enquiry. | Legitimate interests, Art. 6(1)(f) UK/EU GDPR: responding to a message you sent us. |
| Anything else in your message | To understand what you need and respond usefully. | Legitimate interests, Art. 6(1)(f); or steps towards a contract, Art. 6(1)(b), if you go on to engage us. |
Because you send the email from your own account, this website itself collects nothing from you at that point. Your message is handled by our email provider, named below.
When you simply read the site
Nothing optional is loaded until you allow it. If you decline, or ignore the banner entirely, no analytics run and no non-essential storage is written. Fonts are served from this site rather than a third party, so reading a page does not disclose your IP address to anyone but the host.
Our hosting provider keeps standard server logs, which may briefly include IP addresses, for security and to keep the service running. That rests on legitimate interests, Art. 6(1)(f), specifically the interest in operating a site that isn’t knocked over by abuse.
Cookies and similar technologies
The detail lives in the cookie policy. In short: only strictly necessary storage is used by default, anything else waits for your opt-in, and you can change your mind whenever you like: .
Who else sees your data
We do not sell personal data, and we do not share it for anyone else’s marketing. It is disclosed only to:
- Google (Google Workspace), which hosts our email and therefore holds any message you send us. Google acts as our processor under its data processing terms, and relies on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses for transfers outside the UK and EEA.
- Cloudflare, Inc., which hosts and serves this website from its global edge network and processes limited request metadata (such as your IP address) for security and reliability. Cloudflare is established in the United States and acts as our processor under written terms that meet Art. 28, relying on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum for transfers outside the UK and EEA.
- Professional advisers or authorities, where the law requires it.
How long we keep it
- Enquiries that don’t become work: deleted 12 months after our last exchange.
- Enquiries that become client work: retained for the engagement and then for 6 years, to meet UK tax and contract-limitation requirements.
- Your cookie choice: stored on your own device for 12 months. Clearing your browser storage removes it.
- Server logs: the request metadata our host, Cloudflare, processes at its edge for security and reliability is retained only for a short period and is not stored by us.
Your rights
Under UK and EU data protection law you can ask us to:
- give you a copy of the personal data we hold about you (access);
- correct anything inaccurate (rectification);
- delete it (erasure);
- restrict or stop processing it;
- provide it in a portable, machine-readable format, where processing is based on consent;
- stop relying on legitimate interests, by objecting to that processing; and
- withdraw consent at any time, which does not affect anything done before you withdrew it.
Email joe@howardmanagement.co.ukand we’ll respond within one month. There is no charge, and we will not ask you to justify the request.
Complaints
If you think we’ve handled your data badly, please tell us first, because it’s usually quicker to fix that way. You also have the right to complain directly to the Information Commissioner's Office (ICO), or to the supervisory authority in your EU member state of residence.
Changes to this notice
If this notice changes materially, the date at the top changes and, where the change affects what you have consented to, you will be asked again rather than opted in silently.