Data Use & Privacy

1. What data we collect

During the Free Quarterly Health Check

We only collect:

• your questionnaire responses
• your email address

We do not collect:

• documents or files.
• financial statements
• operational evidence
• sensitive personal data
• system access

During a Business Review or Pillar Review

We may collect:

• operational evidence you choose to share
• financial data relevant to the assessment
• process documents
• organisational information
• interview notes

Only what is needed to complete the review — nothing more.

Data entered into SGA calculators is not stored or transmitted — it is used only for on‑screen calculations.

2. What we use your data for

Your data is used to:

• generate your personalised snapshot
• identify risks, gaps, and opportunities
• improve the diagnostic engine
• prepare your Business Review or Pillar Review
• support stabilisation or advisory work (if requested)

We do not use your data for:

• automated decision-making
• marketing
• sales
• profiling

3. Who sees your data

Your data is never sold, and is only shared with:

• SGA, and
• the consultant directly supporting your engagement

No one else.

We do not share your information with third parties, partners, or external organisations.

4. How long we keep your data

Free Quarterly Health Check

Identifiable data is retained for 90 days after the end of an engagement, then deleted.

Business Review / Pillar Review / Advisory & Other Engagements

Identifiable data is retained for 90 days after your engagement concludes, then deleted.

Anonymous trend data

We may retain anonymised, non‑identifiable trend data to help improve the diagnostic engine and understand common SME patterns.

5. How your data is stored

Your data is stored securely using:

• encrypted systems
• UK/EU‑compliant storage
• restricted consultant access
• controlled retention periods

We do not store data on unsecured devices or external systems.

6. GDPR Compliance

SGA follows all UK GDPR requirements when handling your data. This means we:

• only collect the minimum information needed to support your engagement
• use your data solely for the purpose you provided it
• store it securely using encrypted, UK/EU‑compliant systems
• limit access to the consultant directly supporting your engagement
• retain identifiable data only for the defined 90‑day period
• delete identifiable data after the retention period ends
• retain only anonymised trend data for diagnostic improvement
• allow you to request access, correction, or deletion of your data at any time

We do not use your data for marketing, profiling, or advertising, and we do not share it outside SGA.

7. Marketing Preferences

SGA may send optional updates, insights, or service information only if you have opted in or have not opted out. We follow UK GDPR rules for marketing communications, which means:

• you will only receive marketing if you have given consent or have not opted out
• you can change your preferences or unsubscribe at any time
• opting out will be honoured immediately
• opting out does not affect your ability to use SGA services
• we never share your email address with third parties for marketing

If you tell us you do not want to be contacted, we will not send any marketing communications.

8. What we don’t do

SGA does not:

• sell your data
• share your data outside SGA
• use your data for marketing
• use your data for advertising
• store sensitive personal information
• request system access
• request login credentials
• use automated tools to analyse your data without your knowledge

Your information is handled manually, professionally, and only for the purpose of supporting your business.

9. Your rights

You can request:

• a copy of your data
• correction of inaccurate information
• deletion of identifiable data
• clarification on how your data is used

Just contact us and we’ll help.

10. If you book a Business Review

The Data Use policy applies in full. Any additional information you choose to share is:

• never shared outside SGA
• used only for your assessment
• stored securely
• deleted after the retention period

11. Questions or concerns?

If you have any questions about how your data is used or stored, we’re here to help.