Ready to expedite your development lifecycle?
Accelerate your development and boost efficiency with our expert team. Contact us today.
Get in touch
At Gathered & Found, we mobilise experienced project teams, bringing our capability with managing complex Digital Transformations and modern engineering practices to our clients.
We may deploy fully formed squads to support outcome-based services and the delivery of products or provide augmentation to get our clients' own squads situated perfectly; either way, we have you covered.
With 20+ years’ experience working with the UK's most talented and expert technology associates, we select and engage our own teams of consultants to provide Gathered and Found’s consultancy services as well as other professional and administrative staff to support, advise and structure such services.
Our legal entity is listed below:
The following include the different sources from which we may collect your personal data:
Directly from you. For example:
From an agent/third party acting on your behalf. For example:
Through (publicly) available sources. For example:
By reference or word of mouth. For example:
We retain records of our dealings and transactions with you and where applicable, we use such records for the purposes of:
We hold your data on file for as long as the business relationship endures, and your details remain relevant to that business relationship. We will keep your personal data for a maximum of 2 years after our last contact with you. If no meaningful contact has been made with you for a 2-year period, we will delete your data from our systems unless we are under a legal obligation to keep your data for a longer period of time.
Examples of “meaningful contact” includes (but is not necessarily limited to):
As outlined above, please note that there can be other legal reasons that can restrict us from deleting your personal data. See two (non-exhaustive) examples below:
We may also be under a duty to disclose or share or retain your personal data to comply with any legal obligation, to defend our business against a legal claim, to enforce or apply our standard terms of business or other agreements or to protect the rights, property or safety of Gathered and Found, our customers or other parties.
We will not conduct any form of automated processing of your personal data consisting of the use of personal data to evaluate certain personal aspects relating to you.
We will not analyse or predict aspects concerning your economic situation, health, personal preferences, interests, reliability, behaviour, location or movements. Furthermore, we will not make decisions that are based solely on automated processing which produces legal effects or similarly significantly affects your rights.
If we process your personal data, we mostly rely on the following legal bases:
The legal basis on which we usually rely to process your information will be from legitimate interests. Please note that the list of legal bases is not exhaustive.
If you are a representative working for one of our new clients, we would ask for your consent if we were intending to send you Marketing related emails.
If you are a representative who works for one of our existing clients, then we may market relevant products and services to you unless you inform us of your wish to opt out (which you are entitled to do at any stage).
As our servers are based in the United Kingdom, your personal data is shared, stored and processed outside the European Economic Area (EEA).
We will however only transfer your data outside the EEA to countries which the European Commission believes offer an adequate level of protection to you or where appropriate safeguards have been put in place to preserve the privacy of your data.
By law, you have several rights regarding your personal data. You are entitled to lodge a so-called Subject Access Request (‘SAR’). These types of SAR’s and your rights have been summarised in the table below. Further information and advice about your rights can be obtained from the Information Commissioner’s Office.
We will respond to any request within 1 month (this can be extended to 2 months in exceptional circumstances). However, where requests are manifestly unfounded or excessive, in particular because of its repetitive character, we may refuse to act upon your request. If this happens then we will inform you within one month about the possibility of lodging a complaint with a supervisory authority (in the UK, this will be the ICO) or seeking a judicial remedy.
The fact that you make a deletion request does not necessarily mean that we will grant your request in every instance, especially if we have legitimate reasons to retain your personal data. We will always give reasons if we decline your request.
Please note that should we receive any requests from you to erase personal data or stop processing your information, we may retain a record of such requests as well as the actions taken by us. This will serve as both evidence of our compliance to your request as well as enable us to take steps to curtail any future processing of your data should it be received again from a third-party source.
We take all reasonable steps to ensure that your personal data is adequately secured. We use market suppliers such as SourceWhale, Microsoft market, Vincere, Salesforce and Timesheet Portal all of which are leading and up-to-date technologies.
If you are based in the UK and are unhappy about any aspect of the way in which your Personal Data is processed by us, in the first instance please contact us at hello@gatheredandfound.co.uk. This does not affect your right to make a complaint to the Information Commissioner’s Office https://ico.org.uk.
If you are based in the EU and are unhappy about any aspect of the way in which your Personal Data is processed by us, in the first instance please contact us at hello@gatheredandfound.co.uk
It is important to note that we may amend this Data Processing Notice from time to time. Please visit this page if you want to stay up to date as we will post any changes here.
Last updated: May 2025