Privacy Policy
Privacy Policy
Last Updated: 6 October 2026
This Privacy Policy explains how Isambard Associates Limited, trading as Isambard (“Isambard”, “we”, “us” or “our”), collects, uses and protects personal information when you use our website, contact us or engage us to provide professional consultancy services.
Isambard Associates Limited is a company registered in Northern Ireland under company number NI633241, with its registered office at 109a Kilbroney Road, Rostrevor, Newry, Co. Down, Northern Ireland, BT34 3BN.
We are committed to handling personal information responsibly and in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where the EU General Data Protection Regulation (EU GDPR) applies to particular processing activities, we will also process personal data in accordance with its requirements.
1. Who We Are
For the purposes of applicable data protection legislation, Isambard Associates Limited will generally act as the data controller for personal information collected through this website and in the administration of our business.
For certain consultancy assignments, Isambard may process personal information on behalf of a client. Where this occurs, the respective data protection responsibilities of the parties may be addressed in the relevant consultancy agreement, Statement of Work or other contractual arrangements.
Contact details:
Isambard Associates Limited
Trading as Isambard
109a Kilbroney Road
Rostrevor
Newry
Co. Down
Northern Ireland
BT34 3BN
Company Registration Number: NI633241
Telephone: +353 (0) 87 737 7193
Email: brianfitzpatrick@isambard.ie
2. Information We May Collect
The personal information we collect depends upon how you interact with Isambard.
2.1 Website Enquiries
If you contact us through our website contact form, by email or by telephone, we may collect information including:
- your name;
- company or organisation;
- job title, where provided;
- email address;
- telephone number; and
- information contained within your enquiry or subsequent correspondence.
We use this information to respond to your enquiry and, where appropriate, to take steps towards establishing a consultancy engagement.
Information submitted through our website enquiry form is not used to subscribe you automatically to marketing communications or newsletters.
2.2 Client and Consultancy Information
Where you engage Isambard to provide professional services, we may process information reasonably necessary to manage and deliver the assignment.
Depending upon the nature of the engagement, this may include:
- client and stakeholder contact information;
- business and organisational information;
- property, facilities and estates information;
- energy and utility information;
- procurement and contract information;
- environmental, health and safety information;
- engineering and asset information;
- correspondence and project records; and
- other information supplied by the client or generated in connection with the assignment.
Not all such information constitutes personal data. Where information does identify or relate to an identifiable individual, we will handle it in accordance with applicable data protection requirements.
2.3 Website and Technical Information
When you use our website, limited technical information may be processed automatically by the website, hosting infrastructure and technologies necessary to operate and secure the site.
This may include information such as:
- IP address;
- browser and device information;
- operating system;
- date and time of access; and
- technical information required for website security and functionality.
Our use of cookies and similar technologies is explained separately in our Cookie Policy.
3. How We Use Personal Information
We may use personal information where necessary to:
- respond to enquiries;
- communicate with prospective clients;
- prepare proposals, quotations or scopes of work;
- enter into and administer consultancy engagements;
- provide our professional consultancy services;
- communicate with clients, stakeholders and specialist partners;
- manage projects, contracts and client relationships;
- issue and administer invoices and maintain financial records;
- maintain appropriate business and professional records;
- operate, maintain and secure our website and IT systems;
- establish, exercise or defend legal rights; and
- comply with legal, regulatory, accounting and taxation requirements.
We do not currently use personal information submitted through the Isambard website contact form for newsletters or general email marketing.
4. Lawful Bases for Processing
Depending upon the circumstances, we may rely upon one or more of the following lawful bases.
Contract
Processing may be necessary to perform a contract with you or to take steps at your request before entering into a contract, for example when responding to a request for consultancy services or delivering an agreed assignment.
Legitimate Interests
We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by the rights and interests of the individual concerned.
This may include managing client relationships, maintaining business records, responding to business enquiries and protecting our business and IT systems.
Legal Obligation
We may process information where necessary to comply with legal or regulatory obligations, including taxation, accounting and other statutory requirements.
Consent
Where consent is the appropriate lawful basis, we will seek that consent before undertaking the relevant processing. Consent may be withdrawn where applicable.
5. Specialist Partners and Service Providers
Isambard may work with specialist consultants, contractors and established partner organisations in delivering consultancy assignments.
Where necessary for an agreed assignment, relevant information may be shared with such parties to the extent reasonably required to perform the services.
We may also use third-party service providers to support our business operations, including providers of:
- website hosting and website services;
- email and business communications;
- cloud document storage and collaboration;
- IT and cybersecurity services;
- accounting and professional services; and
- other business administration services.
Third parties receiving personal information are expected to process it appropriately and in accordance with applicable data protection requirements.
We do not sell personal information to third parties.
6. Microsoft 365 and SharePoint
Isambard may use Microsoft 365, including SharePoint and associated Microsoft services, for business communications, document management, collaboration and the administration and delivery of consultancy assignments.
Information relating to clients and projects may therefore be processed using these systems where appropriate.
The location in which information is technically processed or stored may depend upon the relevant service provider’s infrastructure and contractual arrangements.
7. Cookies and Website Consent
The Isambard website uses cookies and similar technologies where required for website functionality and, where applicable, other purposes.
We use a consent-management system to provide website visitors with appropriate choices regarding non-essential cookies and technologies.
Further information about the cookies and technologies used by this website, their purposes and how you can manage your preferences is provided in our Cookie Policy.
8. Sharing Personal Information
We may disclose personal information where reasonably necessary to:
- deliver an agreed consultancy assignment;
- work with specialist consultants or partners involved in an assignment;
- obtain professional advice from accountants, lawyers, insurers or other advisers;
- use IT, hosting, cloud and other service providers supporting our business;
- comply with a legal or regulatory requirement;
- respond to a lawful request from a court, regulator or public authority; or
- establish, exercise or defend legal rights.
We will not disclose personal information to third parties for their independent marketing purposes.
9. International Data Transfers
Some of the technology and cloud services used by Isambard or its service providers may involve personal information being processed or accessed outside the United Kingdom or European Economic Area.
Where applicable data protection legislation restricts such transfers, we will rely upon an appropriate lawful transfer mechanism. This may include an adequacy regulation or decision, approved contractual safeguards or another mechanism permitted under applicable data protection legislation.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, regulatory, contractual, accounting and professional requirements.
Different retention periods may therefore apply to different categories of information.
For example, information forming part of a professional consultancy assignment may need to be retained for longer than an unsuccessful preliminary website enquiry.
When information is no longer reasonably required, it will be deleted, anonymised or otherwise securely disposed of as appropriate.
11. Information Security
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, accidental loss or destruction.
Access to client and business information is restricted as appropriate to those who reasonably require access for legitimate business or professional purposes.
No internet-based or electronic storage system can be guaranteed to be completely secure, but we take reasonable steps appropriate to the nature of the information we process.
12. Your Data Protection Rights
Depending upon the applicable legislation and circumstances, you may have rights in relation to your personal information, including the right to:
- request access to personal information held about you;
- request correction of inaccurate or incomplete information;
- request deletion of personal information in certain circumstances;
- request restriction of processing;
- object to certain processing;
- request transfer of information in certain circumstances; and
- withdraw consent where processing is based upon consent.
These rights are subject to the conditions and exemptions contained in applicable data protection legislation.
To exercise a data protection right, please contact us using the details provided in this Privacy Policy.
We may need to verify your identity before responding to a request.
13. Complaints
If you have concerns about how Isambard processes your personal information, please contact us first so that we have an opportunity to address the matter.
As Isambard Associates Limited is established in Northern Ireland, you may also have the right to complain to the UK Information Commissioner’s Office (ICO).
Where EU GDPR applies to particular processing, you may also have rights to complain to the relevant supervisory authority in the European Economic Area.
14. Third-Party Websites
Our website may contain links to websites operated by third parties.
Isambard is not responsible for the privacy practices, security or content of third-party websites. You should review the relevant privacy information provided by those organisations when using their websites or services.
15. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes to our business, website, technology, services or applicable legal requirements.
The current version published on this website will show the date on which it was last updated.
16. Contact Us
If you have a question about this Privacy Policy, the way we process personal information or wish to exercise a data protection right, please contact:
Isambard Associates Limited
Trading as Isambard
109a Kilbroney Road
Rostrevor
Newry
Co. Down
Northern Ireland
BT34 3BN
Company Registration Number: NI633241
Telephone: +353 (0) 87 737 7193
Email: brianfitzpatrick@isambard.ie