Privacy notice

Who we are

Fernandez Consulting (“we”, “us”) provides program direction and regulatory delivery consulting for medical device software. We are the data controller for the personal data described in this notice.

You can reach us at jose@fernandezconsulting.co.

What we collect

When you submit the enquiry form we collect the name, email address, organization and message you provide. We do not use cookies for advertising, and we do not track you across other websites.

Our hosting provider processes standard server logs, including IP address and browser type, for security and reliability purposes.

Why we use it, and our lawful basis

We use the details you submit solely to respond to your enquiry and, where relevant, to discuss a potential engagement. Our lawful basis is your consent, which you give when you submit the form, and our legitimate interest in responding to business enquiries addressed to us.

We do not sell personal data, and we do not add enquiries to a marketing list without a separate request from you.

Who we share it with

Enquiry messages are delivered through Resend, our transactional email provider, and to a Google Workspace mailbox. The website is hosted by Vercel. Each acts as a processor on our behalf under a data processing agreement.

We disclose personal data to no one else, except where required by law.

International transfers

Our processors may store or process data outside the United Kingdom and European Economic Area, including in the United States. Where that occurs, transfers are made under Standard Contractual Clauses or an equivalent approved safeguard.

How long we keep it

Enquiries that do not lead to an engagement are deleted within 24 months. Where an engagement begins, records are retained for the duration of that engagement and for the period required by our professional, contractual and statutory obligations.

Your rights

Subject to applicable law, you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable form, and to withdraw consent at any time.

To exercise any of these rights, contact jose@fernandezconsulting.co. You also have the right to lodge a complaint with a supervisory authority — in the United Kingdom, the Information Commissioner’s Office; in the European Union, the authority in your country of residence.

Changes to this notice

We may update this notice from time to time. The date of the current version is shown below.