Who I am
I am Jonathan Mulligan, an independent research consultant. I operate this website at www.brassvector.com as director of Brass Vector Research Ltd, which is the data controller for this site.
Brass Vector Research Ltd is registered in England & Wales, company no. 17282005. Registered office: Hamilton House, 87–89 Bell Street, Reigate, Surrey, RH2 7AN.
ICO registration: ZC179649
Contact for data enquiries: [email protected]
What I collect and why
When you use this site, I may collect the following information.
Contact form submissions. If you use the contact form, I collect your name, email address, and message. This is stored in HubSpot CRM and used solely to respond to your enquiry. The legal basis is legitimate interests - responding to an enquiry about my work - and, where your enquiry is about engaging my services, taking steps at your request before entering a contract.
Analytics data. If you accept cookies, Google Analytics 4 (GA4) collects data about how this site is used: pages visited, session duration, browser type, device type, and approximate location derived from your IP address. This data does not identify you personally. The legal basis is consent.
Advertising attribution data. If you accept cookies, the LinkedIn Insight Tag records your visit to this site. If you are logged in to LinkedIn, this is associated with your LinkedIn account. I use this to understand the reach of my professional content and any LinkedIn advertising. The legal basis is consent.
HubSpot tracking. If you accept cookies, the HubSpot tracking pixel records page visits and interactions on this site. The legal basis is consent.
How long I keep your data
If you submit an enquiry and we do not go on to work together, I review your details after 24 months and delete them if there is no realistic prospect of a working relationship. While we are in active contact about possible work, I keep your record for as long as that remains a live prospect.
If you become a client, I keep your contact record for the duration of our engagement and for six years after our last transaction, which meets the standard limitation period and HMRC record-keeping requirements. If you ask me to stop contacting you or to remove your data, I act on that promptly; I may keep a minimal record of your email address alone, used only to honour that request.
Analytics and tracking data is retained according to the settings of the relevant service. Google Analytics retains data for up to 14 months by default. LinkedIn and HubSpot have their own retention periods, which you can find in their respective privacy policies.
Third parties
I use the following third-party services to operate this site. Each has its own privacy policy and data processing terms.
- HubSpot (eu1 data centre, European Union) - contact form processing and CRM.
- Google Analytics 4 - website analytics. Analytics data is transferred to Google LLC in the United States; Google currently relies on the UK Extension to the EU-US Data Privacy Framework for that transfer, with Standard Contractual Clauses as a fallback.
- LinkedIn Insight Tag - page visit attribution. LinkedIn and I act as joint controllers for the data collected through the tag. This data is transferred to LinkedIn Corporation in the United States; LinkedIn currently relies on the UK Extension to the EU-US Data Privacy Framework for that transfer, with Standard Contractual Clauses as a fallback.
Analytics and tracking technologies are only loaded after you accept cookies. If you decline, only the contact form (HubSpot) operates, and only when you choose to use it.
Cookies
This site uses cookies and similar tracking technologies for analytics and advertising attribution. When you first visit the site, you are asked to accept or decline these. Your choice is stored in your browser's local storage under the key jm-consent and applies to all pages on the site.
If you decline, no tracking technologies are loaded. If you accept and later change your mind, you can clear the jm-consent entry from your browser's local storage and the prompt will appear again.
Your rights
Under UK GDPR, you have the right to:
- access the personal data I hold about you
- have inaccurate data corrected
- have your data deleted
- restrict how I use your data
- object to processing based on legitimate interests
- receive your data in a portable format
To exercise any of these rights, contact me at [email protected]. You can also make a request directly through my self-service data request page. I will respond within one month.
You also have the right to make a complaint to the Information Commissioner's Office.
Changes to this policy
I may update this policy from time to time. The date at the top of this page shows when it was last updated.