Privacy Policy
Last updated: 25 September 2026
This policy explains how Willis Advisory collects and uses personal information when you visit our website, complete our Client Growth Health Check, request a resource, book a conversation or work with us.
It covers www.willisadvisory.co.uk and healthcheck.willisadvisory.co.uk.
1. Who is responsible for your information?
Willis Advisory is operated by Dan Willis trading as Willis Advisory.
We are the controller of the personal information described in this policy. This means we decide why and how that information is used.
You can contact us at:
Email: dan@willisadvisory.co.uk
2. What information we collect
Depending on how you interact with us, we collect:
- Contact details: your name, email address, telephone number and professional contact information.
- Business details: your agency or company name, website, role and information you provide about your business.
- Enquiries and correspondence: messages, meeting bookings and notes from conversations about your requirements.
- Health Check information: your assessment answers, business information entered into the assessment, calculated scores, results and recommendations.
- Client information: information needed to scope, deliver and administer an engagement, including relevant professional contact details and billing records.
- Preferences: your marketing choices and records of consent, unsubscribe requests or objections.
- Technical information: information processed when you use our websites, such as IP address, browser and device information, access times and security logs.
- Usage information: information about website visits or interactions where the relevant analytics or tracking tools are enabled in accordance with applicable requirements.
Business information may also be personal information where it identifies you or another individual.
Please avoid entering unnecessary personal information about your clients, colleagues or other people into the Health Check or enquiry forms. The Health Check concerns the commercial health of an agency; it is not intended to collect medical information.
3. Where your information comes from
Most information comes directly from you when you complete a form or assessment, contact us, book a meeting or work with us.
We may also receive your professional contact details from someone at your organisation or a person introducing you to us. Where this happens, we will explain the source when we contact you.
Technical information is collected through the systems used to operate our websites and services.
4. How and why we use your information
We use personal information only where we have an appropriate lawful basis.
Responding to enquiries and arranging conversations
We use your contact details and correspondence to answer questions, understand your requirements and arrange meetings.
Our lawful basis is our legitimate interest in responding to people who contact us and managing business relationships. Where you are personally entering into a contract with us, we may instead process information to take steps at your request before entering into that contract.
Providing the Health Check and requested resources
We use the information you submit to process your assessment, produce your results and provide any report or resource you request. Where you request email delivery, we use your email address to send it.
Our lawful basis is our legitimate interest in providing the assessment or resource you have chosen to request.
A request for a report does not, by itself, amount to consent to unrelated marketing.
Delivering advisory services
We use relevant information to scope work, communicate with you, deliver agreed services and manage the engagement.
Where our contract is with you personally, the lawful basis is performance of that contract. Where you represent a company or other organisation, it is our legitimate interest in delivering services to that organisation and managing the relationship.
Managing business records
We use relevant information for invoicing, record-keeping and meeting applicable legal requirements.
Our lawful bases are legal obligation, where a requirement applies, and our legitimate interest in administering the business and establishing or defending legal claims, where appropriate.
Sending marketing communications
Where we ask you to opt in to marketing, we rely on your consent.
For relevant communications to business contacts where the law permits marketing without prior consent, we may rely on our legitimate interest in promoting our services. We consider the recipient’s role, reasonable expectations and privacy interests before doing so.
You can unsubscribe or object at any time.
Maintaining and protecting our services
We use necessary technical information to operate our websites, investigate faults, prevent misuse and protect information.
Our lawful basis is our legitimate interest in maintaining secure and reliable services.
Where we rely on legitimate interests, we consider whether those interests are outweighed by your rights and interests.
5. How the Health Check uses your answers
The Health Check uses your answers to calculate scores across areas of existing-client growth and identify relevant findings and suggested actions.
Your answers influence the assessment result and the recommendations shown. Results reflect the information you provide; they are an indication of areas to explore, rather than an independently verified audit or a guarantee of commercial performance.
We do not use the Health Check to make solely automated decisions about individuals that have legal or similarly significant effects.
You can contact us if you believe information used in your assessment is inaccurate or you would like to discuss how your result was produced.
6. Marketing and your choices
You can stop marketing emails by using the unsubscribe option provided or emailing dan@willisadvisory.co.uk.
You have the right to object at any time to the use of your personal information for direct marketing, including related profiling. We will stop using it for that purpose when you object.
Unsubscribing from marketing does not prevent us from sending a report you have requested or necessary messages about an ongoing enquiry or engagement.
We may retain a minimal record of your email address and preference so that we can honour your opt-out.
7. Cookies and similar technologies
Our websites and third-party tools may use cookies or similar technologies to provide functionality, remember preferences and, where enabled, measure usage.
Where consent is required, we ask for it before using the relevant technology. You can change your choices at any point in time.
You can also manage cookies through your browser, although blocking some technologies may affect functionality.
8. Who we share information with
We share relevant information with service providers that help us operate our business and deliver our services. These include providers of:
- Website hosting and technical infrastructure.
- Meeting booking and contact management.
- Health Check hosting, data storage and report delivery.
- Business email and document storage.
- Accounting and professional advice, where needed.
Our website links to HubSpot for meeting bookings.
Providers acting on our behalf are required to process information under appropriate contractual terms.
We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims.
9. International transfers
Some service providers may store or access personal information outside the United Kingdom.
You can contact us for further information about relevant transfers and how to obtain details of the applicable safeguards.
10. How long we keep information
We retain personal information for the purposes described in this policy and delete or anonymise it when it is no longer needed, subject to applicable legal requirements.
Where information needs to be retained for a legal dispute or another specific legal requirement, we restrict its use to that purpose.
11. Protecting your information
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss or misuse.
Access is limited to people and service providers who need it for their work. No online system can be guaranteed completely secure.
12. Your data protection rights
Depending on the circumstances, you may have the right to:
- Request access to your personal information.
- Ask us to correct inaccurate or incomplete information.
- Ask us to delete information.
- Ask us to restrict how we use information.
- Receive certain information in a portable format.
- Object to processing based on legitimate interests.
- Withdraw consent where we rely on it.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Your right to object: You can object to processing based on legitimate interests for reasons relating to your circumstances. Your right to object to direct marketing is unconditional.
To exercise your rights, email dan@willisadvisory.co.uk. We may ask for information reasonably needed to verify your identity and understand your request.
We normally respond within one month. If an extension or other adjustment is permitted by law, we will explain it.
13. Information you choose to provide
You can browse the website without submitting an enquiry or completing the Health Check.
Where information is necessary to respond to a request, deliver an assessment or provide a service, the relevant form or engagement process will identify it. If you do not provide that information, we may be unable to fulfil the request.
14. Information handled for clients
During advisory engagements, we may handle personal information on a client’s instructions. Where we act as a processor rather than a controller, that processing is governed by our agreement with the client.
The client’s own privacy information explains its use of that information. We will help route relevant requests to the appropriate organisation.
15. Questions and complaints
If you have a question or concern about how we use your information, contact Dan Willis at dan@willisadvisory.co.uk.
You can also raise a complaint with the UK Information Commissioner’s Office:
Website: ico.org.uk/make-a-complaint
16. Changes to this policy
We may update this policy when our services or data-handling practices change. The date at the top shows when it was last updated. Where required, we will bring material changes to your attention.