Introduction
This Privacy Policy explains how Rosa Quality Consulting Limited (“we”, “us”, “our”) collects, uses, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We provide consultancy services within the pharmaceutical and/or medical devices sectors. In the course of delivering these services, we process limited personal data.
We are committed to handling personal data lawfully, fairly, and transparently. We do not process special category data. We do not sell personal data.
Data controller
Rosa Quality Consulting Limited
9-10 Cross Street, Preston, PR1 3LT.
We act as the data controller for all personal data collected for our consultancy services.
Personal data we collect
We collect only the data necessary to operate our consultancy services, such as:
- Name
- Job title
- Business email address
- Business telephone number
- Business address
- Billing and invoicing information
- Communication records
- Contract or engagement documents
- Project related information you provide
How we collect personal data
We collect personal data:
- When you contact us directly
- When you request a proposal, quote, or meeting
- When we enter into a contract
- Through ongoing project communications
- Through invoicing and financial interactions
Lawful bases for processing
Contract
We process personal data when it is necessary to deliver our consultancy services, or take steps at your request prior to entering a contract. This includes communicating with clients, issuing proposals, providing consultancy outputs, and sending invoices.
Legal obligation
We may retain or share information where required to comply with UK law, such as tax, accounting, or regulatory obligations.
Legitimate interests
We may retain limited personal data after a contract ends for purposes such as evidence of services or dealing with legal claims. These interests are balanced against your rights and freedoms.
How we use personal data
We use your data to:
- Provide consultancy services
- Communicate with you throughout a project
- Manage proposals, contracts, and deliverables
- Issue invoices and manage payments
- Maintain business and tax records
- Respond to queries or complaints
- Comply with legal obligations
- Deal with legal claims where necessary
Data sharing
We may share personal data with:
- Professional advisers (e.g., accountants, legal advisers)
- HMRC or other regulatory authorities where required
We do not sell personal data.
Data retention
We keep personal data only for as long as necessary for the relevant purpose.
Retention periods:
- Contract and project documents and records: six years
- Financial records: six years
Your rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct data you believe is inaccurate
- Request deletion (where applicable)
- Restrict processing of your data
- Object to processing based on legitimate interests
- Data portability (where processing is based on Contract)
Some rights apply only in specific circumstances and may not override legal obligations.
To exercise your rights you can contact us at:
Rosa Quality Consulting Limited
9-10 Cross Street, Preston, PR1 3LT.
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details above.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Security
We take appropriate technical and organisational measures to protect personal data, including secure systems, access controls, and restricted access to confidential information.
Changes to this policy
We may update this Privacy Policy from time to time.
The latest version will be published on our website with a “Last Updated” date.
Last updated: March 2026
Cookie policy
Please read this cookie policy (“cookie policy”, “policy”) carefully before using the Rosa Quality Consulting website (“website”) operated by Rosa Quality Consulting Limited (“us”, ‘we”, “our”).
What are cookies?
A cookie is a small text file that is downloaded onto ‘terminal equipment’ (e.g. a computer or smartphone) when the user accesses a website. It allows the website to recognise that user’s device and store some information about the user’s preferences or past actions. Cookies are widely used to make websites work, or work more efficiently, and to provide information to the website operator.
Types of cookies we use
Necessary cookies
Strictly necessary cookies are essential for a website to function properly, enabling core features such as security, network management, and accessibility.
Preference cookies
Also known as “functionality cookies”, these cookies allow our website to remember choices you have made in the past, such as whether you chose to accept, reject or customise cookies.
Statistics cookies
Also known as “performance cookies,” these cookies collect information about how you use our website, such as which pages you visited and which links you clicked on. The purpose of these cookies is to improve website functions and none of this information is used to identify you.
Marketing cookies
We do not use marketing cookies.
How can I manage cookies?
You can also manage cookies through your browser settings. Please note if you disable strictly necessary cookies, you may not be able to use or access some or all parts of the website.
Contact us
If you have any questions about this policy or our use of cookies, please contact us at info@rosaqc.com