Legal

Privacy policy

Data controller: Jonathan Mulligan, Research Consultant — Last updated: 5 June 2026

Who I am

I am Jonathan Mulligan, an independent research consultant. I operate this website at jonmulligan.co.uk as a sole trader.

ICO registration: [to be added once registered]

Contact for data enquiries: jonmulligan81@gmail.com

What I collect and why

When you use this site, I may collect the following information.

Contact form submissions. If you use the contact form, I collect your name, email address, and message. This is stored in HubSpot CRM and used solely to respond to your enquiry. The legal basis for this processing is legitimate interests.

Analytics data. If you accept cookies, Google Analytics 4 (GA4) collects data about how this site is used: pages visited, session duration, browser type, device type, and approximate location derived from your IP address. This data does not identify you personally. The legal basis is consent.

Advertising attribution data. If you accept cookies, the LinkedIn Insight Tag records your visit to this site. If you are logged in to LinkedIn, this is associated with your LinkedIn account. I use this to understand the reach of my professional content and any LinkedIn advertising. The legal basis is consent.

HubSpot tracking. If you accept cookies, the HubSpot tracking pixel records page visits and interactions on this site. The legal basis is consent.

How long I keep your data

Contact form data is retained in HubSpot CRM until you ask me to delete it.

Analytics and tracking data is retained according to the settings of the relevant service. Google Analytics retains data for up to 14 months by default. LinkedIn and HubSpot have their own retention periods, which you can find in their respective privacy policies.

Third parties

I use the following third-party services to operate this site. Each has its own privacy policy and data processing terms.

  • HubSpot (eu1 data centre) — contact form processing and CRM. [verify EU data residency]
  • Google Analytics 4 — website analytics. [verify data residency and transfer basis]
  • LinkedIn Insight Tag — page visit attribution. [verify data residency and transfer basis]

Analytics and tracking technologies are only loaded after you accept cookies. If you decline, only the contact form (HubSpot) operates, and only when you choose to use it.

Cookies

This site uses cookies and similar tracking technologies for analytics and advertising attribution. When you first visit the site, you are asked to accept or decline these. Your choice is stored in your browser's local storage under the key jm-consent and applies to all pages on the site.

If you decline, no tracking technologies are loaded. If you accept and later change your mind, you can clear the jm-consent entry from your browser's local storage and the prompt will appear again.

Your rights

Under UK GDPR, you have the right to:

  • access the personal data I hold about you
  • have inaccurate data corrected
  • have your data deleted
  • restrict how I use your data
  • object to processing based on legitimate interests
  • receive your data in a portable format

To exercise any of these rights, contact me at jonmulligan81@gmail.com. I will respond within one month.

You also have the right to make a complaint to the Information Commissioner's Office.

Changes to this policy

I may update this policy from time to time. The date at the top of this page shows when it was last updated.