
Privacy Policy
Last updated: Feb 11, 2026
​
This Privacy Policy explains how So What, Now What™ (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit our website or contact us.
We take privacy seriously and only collect the minimum information needed to operate the site responsibly and communicate with you.
1. Who We Are
So What, Now What™ is a UK‑based strategic advisory and editorial consultancy founded by Tim Banting.
So What, Now What™
54 Lammas Way, Letchworth, Herts. SG6 4LW
Company Number: 1646809
Email: tbanting@sowhatnowwhat.co.uk
For the purposes of UK data protection law, we are the data controller.
​
2. What This Policy Covers
This policy applies to:
-
your use of this website
-
any information you provide when contacting us
-
how we handle and protect that information
It does not apply to external websites we link to. Always check their privacy policies before using them.
​
3. What Data We Collect
We only collect information that helps us operate the website or respond to enquiries. This may include:
-
your name and contact details (if you email us or use a form)
-
your job title or organisation (if you choose to provide it)
-
technical information such as IP address, browser type, and device type
-
how you interact with the website (pages visited, time on page, etc.)
-
any information you voluntarily send us
We do not collect sensitive personal data.
4. How We Collect Data
We collect data in two ways:
a) Information you provide directly
For example, when you:
-
contact us by email
-
request information
-
subscribe to updates (if offered)
b) Information collected automatically
Like most websites, we collect limited technical data through:
-
server logs
-
analytics tools
-
cookies (see section 10)
This helps us understand how the site is used and improve it.
​
5. How We Use Your Data
We use your information to:
-
respond to enquiries
-
operate and improve the website
-
maintain security and performance
-
keep internal records
-
send updates or communications you’ve opted into
We do not sell your data.
We do not share your data with advertisers or lead‑gen partners.
​
6. Legal Basis for Processing
We process personal data under the following lawful bases:
-
Legitimate interests — running the website, responding to enquiries, improving content
-
Consent — when you opt into communications
-
Legal obligation — where required by law or regulation
​
7. Who We Share Data With
We only share data when necessary to operate the website or comply with the law. This may include:
-
website hosting providers
-
email service providers
-
professional advisers (e.g., legal or accounting)
-
•regulators or authorities if legally required
We do not share your data with third‑party marketers.
8. How We Protect Your Data
We use appropriate technical and organisational measures to keep your data secure, including:
-
secure servers
-
access controls
-
encryption where appropriate
If you suspect misuse or unauthorised access, contact us immediately at tbanting@sowhatnowwhat.co.uk.
​
9. How Long We Keep Your Data
We keep personal data only for as long as necessary:
-
enquiry emails: typically up to 12 months
-
analytics data: typically up to 26 months
-
legal or regulatory requirements may require longer retention
You can request deletion at any time.
​
10. Cookies
This website may use cookies to:
-
understand how visitors use the site
-
improve performance and usability
You can control or disable cookies through your browser settings.
Disabling cookies may affect how the site functions.
​
11. Your Rights
Under UK GDPR, you have the right to:
-
access the personal data we hold about you
-
correct inaccurate information
-
request deletion of your data
-
restrict or object to processing
-
withdraw consent (where consent is the basis for processing)
-
lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, email: tbanting@sowhatnowwhat.co.uk
ICO website: https://ico.org.uk/
12. Transfers Outside the UK
If we transfer data outside the UK (for example, if our hosting provider uses overseas servers), we ensure appropriate safeguards are in place, such as:
-
adequacy decisions
-
standard contractual clauses
​
13. Changes to This Policy
We may update this Privacy Policy from time to time.
The “last updated” date at the top will always show the latest version.