Cassava Consulting - Your Trusted Partner in Data Protection & AI Governance

Privacy Notice

At Cassava Consulting we specialise in providing expert guidance on data protection and AI governance. We offer tailored solutions that will help you to:<ul><li>Implement robust data protection measures.</li><li>Embed data protection into your products and services.</li><li>Responsibly develop, deploy and implement AI systems.</li></ul>We equip you with tools to safeguard your most valuable asset, build customer trust, and accelerate your business growth. Get in touch to see how we can help you.

Two middle age business workers smiling happy and confident. Working together with smile on face hand giving high five at the office

Protect Data, Build Trust, Grow Your Business

We conduct thorough assessments of your data protection practices to evaluate compliance with the GDPR, the Data Protection Act 2018, PECR, and other relevant laws. Our comprehensive reports detail our findings and provide actionable recommendations to address any areas of non-compliance.

If you have a little bit of time left, how about start writing your own bucket list

Compliance Audits and Gap Analysis

We carry out risks assessments to identify vulnerabilities in your products, services and processes. Our comprehensive assessments cover all critical areas, including data protection impact assessments, transfer risk, AI risk and vendor risk assessments.Based on our findings, we provide you with actionable insights and recommendations to strengthen your overall data protection and governance posture.

Design thinking is a human-centered approach to innovation that draws from the designer's toolkit to integrate the needs of people, the possibilities of technology, and the requirements for business success. Design thinking has a human-centered core. It encourages organizations to focus on the people they're creating for, which leads to better products, services, and internal processes.

Risk Assessments

We create customised privacy policies and procedures documents that align with your business practices and comply with legal requirements. Our policies help you create a robust privacy framework, build trust with your clients and safeguard their data.

Privacy Policy Development

We help you establish comprehensive AI governance frameworks to ensure ethical and responsible AI use. Our tailored frameworks address compliance, and ensure that you develop, deploy and implement AI systems responsibly and in line with data protection requirements.

AI Governance Framework Development

We work closely with you to develop robust incident response plans and reporting procedures, defining clear criteria and workflows for evaluating the severity of security incidents and determining when regulatory or public notification is required.

Outbreak response in action: Centers for Disease Control and Prevention (CDC) staff support the 2019 nCoV response in the CDC’s Emergency Operations Center (EOC).

Incident Response Planning

Our interactive training sessions equip your team with essential knowledge on data protection laws and responsible use of AI. Tailored workshops are designed to foster a culture of compliance and responsibility within your organisation.

Employee Training and Awareness Programmes 

We provide support and guidance to help you navigate the complex areas of direct marketing, consent management and cookies compliance.&nbsp; Our experts assess your direct marketing practices identifying areas of good practice as well as areas that need improvement to be compliant.

Woman's hand writing the word "audience" on a whiteboard, with arrows. 

Direct Marketing and Cookie Compliance

We provide support and guidance to help you efficiently manage and respond to subject access requests from individuals. Our expert team guides you through the entire process, from validating requests to compiling the necessary information and documentation required to respond to the request.

High tech workers office, whiteboard, notes, papers, plans, sample diskettes, stacked, in piles, reviews, keyboard, screen, notes, door desk, speakers, old calendar, cup of noodles, view, high rise, Seattle, Washington, USA

Active workspace. This is not the messiest office I have ever seen. I saw an office where the paper went up the walls in a v-shape- there was a path through the middle, where 3 developers worked. But I was unable to snap a photo of it. They threw away their notes, paper, books, etc, from time to time. Drop a dollar if you wish https://paypal.me/1drlane
wonderlane@gmail.com

Subject Access Requests Support

We provide end to end support on data privacy compliance, risk assessments and policy design tailored to your business. Our ongoing support through our flexible retainer packages ensures that you are covered without adding to your headcount.

Data Protection Consultancy

Our Services

Let us help you safeguard your most valuable asset, your data, to drive business growth.

Name

Email address

Phone number

Message

Contact Us

This Privacy Notice explains how Cassava Consulting collects, uses, shares, and protects your personal information whenever you interact with us.&nbsp; It also outlines your rights under data protection law and how you can exercise them.1. Who We AreCassava Consulting is the data controller responsible for how your personal information is collected and used. When this notice refers to "we", "us", or "our", it means Cassava Consulting.This notice applies to all personal data we collect in connection with our business activities.If you have any questions about this notice or how we handle your data, please contact us at <a target="_blank" rel="noopener noreferrer nofollow" href="mailto:hello@cassava.consulting">hello@cassava.consulting</a>.2. What Information We CollectWe collect and process the following types of personal data:<ul><li>Identity Information&nbsp; e.g. your name, title, &nbsp;gender</li><li>Contact Information&nbsp; e.g. your postal address, email address, and phone number</li><li>Financial Information&nbsp; e.g. your bank account and payment card details</li><li>Website and Technical Information e.g. &nbsp;IP address, device and browser type, and how you interact with our online services</li><li>Transactional Information – relating to purchases, payments, or services provided</li><li>Preferences and Feedback – e.g. your marketing preferences, survey responses, or product interests</li></ul>3. How We Collect Your InformationWe collect information in several ways, including:<ul><li>Direct interactions – when you contact us, place an order, submit an enquiry, complete a form, or provide feedback</li><li>Automated means – technical data from your device when you access our website</li><li>Third parties – including payment processors, delivery providers, and identity verification services</li></ul>We only collect information that is relevant and necessary for the purposes explained below.4. How We Use Your InformationWe use your personal data for the following purposes:<ul><li>To provide our products and services, including handling enquiries and orders<ul><li>Type of Data: Identity, Contact</li><li>Legal Basis: Contract</li></ul></li><li>To manage payments, refunds, and invoicing<ul><li>Type of Data: Identity, Contact, Financial</li><li>Legal Basis: Contract, Legal obligation</li></ul></li><li>To maintain communication with you and manage our relationship<ul><li>Type of Data: Identity, Contact</li><li>Legal Basis: Legitimate interests, Contract</li></ul></li><li>To comply with legal or regulatory requirements<ul><li>Type of Data: Identity, Contact, Financial</li><li>Legal Basis: Legal obligation</li></ul></li><li>To improve our services, systems, and customer experience<ul><li>Type of Data: Technical</li><li>Legal Basis: Legitimate interests</li></ul></li><li>To send you updates or marketing (if you've agreed)<ul><li>Type of Data: Identity, Contact, Marketing preferences</li><li>Legal Basis: Consent</li></ul></li></ul>Where we rely on consent to process your personal data, you can withdraw your consent at any time. &nbsp;However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you5. Sharing Your InformationWe may share your personal data with trusted third parties when necessary, such as:<ul><li>IT and cloud service providers</li><li>Payment service providers</li><li>Delivery and logistics partners</li><li>Professional advisers (e.g. legal or accounting firms)</li><li>Regulators, authorities, or law enforcement if required by law</li><li>Parties involved in a merger, acquisition, or business transfer</li></ul>All third parties are required to handle your data securely and only for specified purposes.6. International Data TransfersWe aim to work with service providers and partners based in the UK or the European Economic Area (EEA).&nbsp; Where this is not possible and we need to transfer your personal data outside the UK or EEA (for example, to a technology provider based in another country), we make sure your data is properly protected. This may include:<ul><li>Using International Data Transfer Agreements (IDTAs) approved by the UK Information Commissioner’s Office</li><li>Transferring to countries recognised as providing adequate data protection</li><li>Putting in place other appropriate safeguards where required</li></ul>7. Data SecurityWe take appropriate security measures to protect your personal data from accidental loss, misuse, or unauthorised access. We limit access to your data to those who have a legitimate business need and are bound by confidentiality obligations.8. How Long We Keep Your DataWe only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including to satisfy legal, regulatory, or accounting requirements.For example, financial records are usually kept for up to six years after the end of a customer relationship. After that, your data will be securely deleted or anonymised.9. Your RightsYou have rights under UK data protection law, including:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Information – to be informed about the collection and use of your personal data<ul><li>Access – to see the personal data we hold about you</li><li>Rectification – to update or amend your information</li><li>Erasure – to ask us to delete your data in certain cases</li><li>Objection – to object to how your data is used, particularly for marketing</li><li>Restriction – to limit how we use your data in some circumstances</li><li>Portability – to request your data in a structured format for transfer to another service</li><li>Automated Processing and Profiling - to not be subject to a decision based solely on automated processing or profiling.</li><li>Withdraw consent – where we rely on your consent to use your data</li></ul>To exercise these rights, please contact us using the details below. We may need to verify your identity before fulfilling your request.If you have questions, concerns, or wish to exercise your rights, you can contact us at <a target="_blank" rel="noopener noreferrer nofollow" href="mailto:hello@cassava.consulting">hello@cassava.consulting</a>10. ComplaintsPlease send any complaints in relation to your personal data to <a target="_blank" rel="noopener noreferrer nofollow" href="mailto:hello@cassava.consulting">hello@cassava.consulting</a>.If you are not satisfied with how we handle your complaint or data, you can complain to the Information Commissioner’s Office (ICO): Website: <a target="_blank" rel="noopener noreferrer nofollow" href="http://www.ico.org.uk">www.ico.org.uk</a> 11. Updates to This Privacy NoticeThis notice may be updated from time to time. When we do, we will update the “last updated” date and publish the latest version on our website. We encourage you to review it regularly.Last updated: 24th June 2025&nbsp;

close up, bokeh, macro, blur, blurred background, close focus, bible, old testament, hebrew bible, christian, judaism, history, text, reading, bible study, devotions, text, NIV, New International Version, type, typography, canon, christianity, holy scripture, holy bible, scripture, chronicles, 2 chronicles, דִּבְרֵי־הַיָּמִים, Diḇrê Hayyāmîm, hebrew bible, final book, ketuvim, tanakh, septuagint, Paralipoménōn,  Books of Paralipomenon, second chronicles, historical, ancient near east texts, anet, 
