Privacy Policy
This policy explains how Illume collects, uses and protects personal information across our website, client engagements, programmes and online platforms.
It also sets out your rights, the choices available to you and how to contact us about your information.
On this page
Who we are
Illume Executive Consulting Ltd ("Illume", "we", "us" or "our") is a company registered in England and Wales under company number 16574099. Our registered office is Arch Unit 1160 Bath Factory Estate, 41 Norwood Road, London, England, SE24 9AJ.
Illume is the controller of personal information covered by this policy where we decide how and why that information is used. In some client engagements, we may process information on the documented instructions of a client organisation. In those circumstances, the client organisation may be the controller and its own privacy policy may also apply.
Questions about this policy or the way we use personal information can be sent to contact@illumeexecutiveconsulting.com.
Information we collect
The information we collect depends on how you interact with Illume. It may include:
We may receive information directly from you, from your employer or another client organisation that has arranged your participation, through our website and digital platforms, from event or referral partners, or from publicly available professional sources.
If an engagement, survey or diagnostic involves special-category information, such as information about health, ethnicity, religion or another protected characteristic, we will explain the specific purpose and legal basis at the point of collection where additional information is required.
How and why we use personal information
We use personal information only where we have a lawful basis to do so.
| How we use it | Purpose | Lawful basis |
|---|---|---|
| Enquiries and client relationships | To respond to enquiries, take steps towards a contract, manage professional relationships and develop our services. | Steps towards a contract and our legitimate interests. |
| Service delivery | To deliver consulting, advisory, learning and programme services agreed with client organisations. | Contractual obligations and our legitimate interests. |
| Account administration | To provide secure access, communicate service information, support users and manage participation. | Contractual obligations and our legitimate interests. |
| Delivery and engagement monitoring | To understand whether services are being accessed, support participants, evaluate delivery and provide agreed reporting to client organisations. | Contractual obligations and our legitimate interests. |
| Operational communications | To send service messages, event information, requested materials and other operational updates. | Contractual obligations and our legitimate interests. |
| Relevant marketing | To share research, events, briefings and information about Illume services. | Consent where required, or our legitimate interests where permitted. |
| Service improvement and protection | To analyse performance, maintain security, resolve problems and develop our website, programmes and services. | Our legitimate interests. |
| Legal and regulatory requirements | To meet accounting, tax and record-keeping obligations, safeguard our legal rights and respond to lawful requests. | Legal obligations and our legitimate interests. |
Where we rely on legitimate interests, we consider whether the use is necessary and proportionate and balance our interests against the rights and reasonable expectations of the people concerned.
The Inclusive Foundations Programme and platform reporting
Where your organisation arranges your participation in the Inclusive Foundations Programme, it may provide us with your name, work email address, role and organisation so that we can create and administer your account.
The digital platform records access and engagement information. This may include whether you have activated or accessed your account, your sign-ins and recent activity, and your completion of programme modules, lessons, quizzes and diagnostics.
Where agreed as part of the programme, we may provide the sponsoring client organisation with individual-level information about platform access and completion, together with aggregated programme-level information and insights.
This supports programme administration, engagement monitoring and evaluation. Illume does not use this information to make employment decisions about participants.
Where a diagnostic or survey requires a different use of information, or where individual responses will be disclosed rather than aggregated, we will provide additional information before that collection takes place.
Marketing communications
We may send you The Culture Economy briefing, research, event invitations or information about Illume services where you have asked to receive them or where we are otherwise permitted to do so. Marketing communications are separate from essential messages concerning an existing service, account or programme.
You can unsubscribe using the link in any marketing email or by contacting us. We may retain minimal information on a suppression list to make sure we respect your request not to receive further marketing.
Cookies and website analytics
Our website uses cookies and similar technologies. Some are necessary for the website, forms and secure member areas to function. Other cookies, including performance and analytics cookies, are used only where the required choice or consent has been obtained.
You can manage non-essential cookies through the cookie controls provided on our website and through your browser settings. Disabling necessary cookies may affect website or platform functionality.
Who we share information with
We do not sell personal information. Where necessary for the purposes described in this policy, we may share information with:
- Client and sponsoring organisations — where they have arranged an engagement or programme and reporting has been agreed, as explained above.
- Faculty members, consultants and delivery partners — where they need the information to support an Illume engagement and are subject to appropriate confidentiality and data-protection obligations.
- Trusted service providers — that support our website, hosted learning platform, communications, analytics, scheduling, payment processing, document storage and business operations.
- Professional advisers and authorities — including legal, accounting or insurance advisers, regulators, courts, law-enforcement bodies or other parties where disclosure is required or permitted by law.
- Parties involved in a business change — where necessary in connection with a merger, restructuring, sale or transfer, subject to appropriate safeguards.
Service providers may only use personal information for the services they provide to us and in accordance with their contractual and legal obligations.
International transfers
Some of our service providers operate or store information outside the United Kingdom. Where personal information is transferred internationally, we use an appropriate legal safeguard, such as UK adequacy regulations, approved contractual clauses or another mechanism permitted by UK data-protection law.
You may contact us for further information about the safeguards relevant to your information.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including programme delivery, client reporting, relationship management and legal, accounting or regulatory requirements.
When deciding how long to retain information, we consider the nature and sensitivity of the information, the duration of the client or programme relationship, agreed reporting requirements, limitation periods, legal obligations and whether the information can be securely anonymised. When information is no longer required, it is deleted, anonymised or securely archived with restricted access.
Security
We use appropriate organisational and technical measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure. Access is limited to people and providers that need the information for legitimate purposes.
No online service is completely secure, but we review our safeguards and respond to suspected data incidents in accordance with applicable law.
Your rights
Depending on the circumstances and the lawful basis being used, you may have the right to:
These rights are not absolute and may not apply in every situation. To exercise a right, contact contact@illumeexecutiveconsulting.com. We may need to verify your identity before responding.
Automated decision-making
Illume does not use personal information to make solely automated decisions that produce legal or similarly significant effects.
A programme diagnostic may automatically calculate a score, pathway or recommendation, but these outputs are used as development and programme tools rather than as automated employment decisions.
Complaints
If you are concerned about how we have used your information, please contact us so that we can investigate.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. Further information is available at ico.org.uk/make-a-complaint.
Changes to this policy
We may update this policy when our services, systems or legal obligations change. The latest version will be published on our website with its last-updated date.
Where a change materially affects how we use existing personal information, we will take reasonable steps to bring it to the attention of the people concerned before the new use begins.