Privacy & Data Policy

When you apply for a seat or submit an enquiry, we collect:

• Personal identification: Full name, job title, email address and phone number.
• Business demographics: Business name, website, location, annual turnover, employee count and years in business.
• Strategic & advisory details: Current business challenges, advisory structures and board readiness.
• Correspondence: Any emails or messages you send us directly.

We only process your data when we have a legal basis to do so:

• Performance of a contract / pre-contractual steps: To process your membership application and evaluate your fit for a table.
• Legitimate interests: To respond to enquiries, manage our relationships and ensure there are no competitor conflicts between table members.
• Consent: To send you marketing updates and newsletter emails, which you can withdraw at any time.

We use HubSpot CRM to securely store and manage your contact information. HubSpot is GDPR-compliant.

Because HubSpot may store and process data on servers located outside the UK and the European Economic Area (EEA), primarily in the United States, we ensure that appropriate safeguards — such as Standard Contractual Clauses approved by the UK Information Commissioner's Office — are in place to guarantee your data remains fully protected. We never sell, rent or share your data with unauthorised third parties.

We only keep your data for as long as necessary:

• Successful applicants: Kept for the duration of your membership and up to 6 years after termination for legal and accounting purposes.
• Unsuccessful or withdrawn applications: Deleted or securely anonymised within 90 days of a decision, unless you explicitly ask us to keep you on a waiting list.
• General enquiries: Deleted within 12 months if no further relationship develops.

Under UK GDPR, you have the following rights regarding your data. We will respond to any request within one month, as required by law:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion — "the right to be forgotten."
• Restrict or object: Restrict or object to our processing of your data.
• Withdraw consent: Withdraw consent for marketing updates at any time by clicking "unsubscribe."

To exercise any of these rights, please contact us at hayley@thedirectorstable.co.

Under the Privacy and Electronic Communications Regulations (PECR) and UK GDPR, we only store or access information on your device with your consent, unless it is strictly necessary for the site to work.

• Strictly necessary — always on: Secure sign-in session storage and your saved cookie preferences. These are essential to operate the site and do not require consent.
• Analytics — optional: Privacy-respecting usage measurement, only enabled if you accept analytics in the cookie banner. We never load analytics before you have made a choice.
• Marketing — optional: We do not use advertising or cross-site tracking cookies. This category is off by default and only applies if you choose to enable it.

You can accept, reject, or change your choices at any time via Cookie Preferences in the website footer. Withdrawing consent is as easy as giving it, and takes effect immediately.

If you have any concerns about how we use your data, please contact us first at hayley@thedirectorstable.co. If we cannot resolve your issue, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection (www.ico.org.uk).