Privacy Policy

EBA Group Limited

Privacy Policy

1. About This Policy

EBA Group Limited (“we”, “us”, “our”) is committed to protecting your personal data and being transparent about how we use it. This policy explains what data we collect, why we collect it, how we use it and what your rights are.

This policy applies to data collected through our website eba-group.co.uk, our contact and enquiry forms, our event registration forms, our newsletter sign-up, and our job application process.

This policy should be read alongside our Cookie Policy, which explains how we use cookies on our website.

Last updated: April 2026.

2. Who We Are

EBA Group Limited is the data controller for personal data collected through this website and our associated processes.

EBA Group Limited
Rear Barn, The Brookdale Centre, Knutsford, Cheshire, WA16 0SR
Email: hello@eba-group.co.uk
Tel: 0333 358 0117
Web: eba-group.co.uk

We are regulated by the Institute of Chartered Accountants in England and Wales (ICAEW). Company number: 06700320. VAT number: 944373214.

3. What Data We Collect and Why

3.1 Website Contact Form

When you submit an enquiry through our website contact form, we collect your name, email address, phone number, company name (if provided) and the content of your message. This data is sent to our internal team inbox and may also be stored in our marketing platform, ActiveCampaign.

We use this data to respond to your enquiry. Our lawful basis is legitimate interests — we have a legitimate interest in responding to people who contact us.

3.2 Newsletter Sign-Up

If you sign up to receive our newsletter or updates via our website footer or any other sign-up form, we collect your name and email address. This data is stored and managed in ActiveCampaign.

We use this data to send you the communications you have signed up for. Our lawful basis is consent. You can unsubscribe at any time using the link in any email we send you.

3.3 Job Applications

If you apply to join the eba team through our careers pages, you will be directed to a Typeform application form. We collect your name, email address, phone number and any information you provide as part of your application.

We use this data to assess your application and, if relevant, contact you about the role. Our lawful basis is legitimate interests in recruiting suitable candidates. If your application is unsuccessful, we will retain your data for up to six months and then delete it, unless you give us permission to keep it on file for future opportunities.

3.4 Event Registration

When you register for an event hosted or organised by eba, we collect your name, email address, company name (if provided) and any other details requested on the registration form. Event registration forms are hosted via Typeform and data is managed in ActiveCampaign.

We use this data to manage your attendance, communicate event details and follow up where relevant. Our lawful basis is legitimate interests in organising and running events. If you have also opted in to marketing communications, we may send you relevant updates in future.

3.5 Website Analytics

With your consent, we use Google Analytics 4 to collect anonymised data about how visitors use our website, including pages visited, time on site and general location data. This helps us improve the site. No personally identifiable information is collected through analytics. See our Cookie Policy for more detail.

4. How We Store and Protect Your Data

Your data is stored securely within the following platforms, all of which operate under their own data processing agreements with us:

  • ActiveCampaign — for contact, newsletter and event data. ActiveCampaign is based in the US and operates under standard contractual clauses approved for international data transfers under UK GDPR.
  • Typeform — for job applications and event registrations. Typeform is based in the EU and complies with UK GDPR requirements.
  • Internal email — enquiries submitted via the contact form are also received into a secure internal email inbox at eba-group.co.uk.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. Access to personal data is restricted to team members who need it to do their job.

5. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes it was collected, or as required by law. As a general guide:

  • Enquiry and contact form data is retained for as long as the enquiry remains active, and for a reasonable period thereafter in case of follow-up.
  • Newsletter subscriber data is retained until you unsubscribe.
  • Job application data is retained for up to six months after the application process concludes, unless you give permission for longer retention.
  • Event registration data is retained for up to 12 months after the event.

6. Sharing Your Data

We do not sell your personal data to third parties. We share data only with the platforms listed in Section 4 that help us operate our services, and only to the extent necessary. We may also disclose data where required to do so by law or by a regulatory authority.

7. Marketing Communications

We will only send you marketing communications if you have given us your consent to do so, or where we have a legitimate interest in contacting you based on a prior enquiry or relationship. Every marketing email we send includes an unsubscribe link. You can also contact us directly at hello@eba-group.co.uk to opt out at any time.

8. Cookies

We use cookies on our website. For full details of what cookies we use and how to control them, please read our Cookie Policy, available on this site.

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access — you can request a copy of the personal data we hold about you.
  • Right to rectification — you can ask us to correct inaccurate or incomplete data.
  • Right to erasure — you can ask us to delete your data in certain circumstances.
  • Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
  • Right to data portability — you can request that we transfer your data to another organisation in a structured, machine-readable format.
  • Right to object — you can object to us processing your data where we rely on legitimate interests as our lawful basis.
  • Right to withdraw consent — where we rely on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at hello@eba-group.co.uk. We will respond within one month. There is no charge for making a request.

10. Complaints

If you are unhappy with how we have handled your personal data, please contact us in the first instance at hello@eba-group.co.uk and we will do our best to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Web: ico.org.uk

11. Client Portal

We are in the process of introducing a secure client portal. When live, a separate notice will be provided explaining how personal and financial data submitted through the portal is collected, stored and protected. This policy will be updated accordingly.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in how we operate or changes in the law. The “last updated” date at the top will always reflect the current version. Where changes are significant, we will take reasonable steps to bring them to your attention.

13. Contact Us

If you have any questions about this policy or how we handle your personal data, please get in touch:

EBA Group Limited
Rear Barn, The Brookdale Centre, Knutsford, Cheshire, WA16 0SR
Email: hello@eba-group.co.uk
Tel: 0333 358 0117
Web: eba-group.co.uk

© EBA Group Limited 2026