Last updated: 20 October 2026

At Flint + Arrow, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains what information we collect when you visit our website, how we use it, who we share it with and your rights under UK data protection law.

1. Who we are

Flint + Arrow provides strategic consultancy and support to charities, nonprofits and mission-driven organisations, specialising in digital transformation, artificial intelligence (AI), innovation and organisational change.

For the purposes of UK data protection law, the data controller responsible for your personal information is:

Business name: FLINT & ARROW CONSULTING LIMITED

Email: kit@flintandarrow.com

Registered address: 167-169 Great Portland Street, London, Greater London, England, W1W 5PF

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

2. Information we collect

We may collect personal information when you visit our website, contact us or interact with our services.

Information you provide directly

When you contact us by email or through a website form, we may collect:

Your name
Your email address
Your organisation or job title, if provided
Your telephone number, if provided
Details of your enquiry or message
Any other information you choose to share with us

We use this information to respond to enquiries, communicate with you and provide information about our services.

Information collected automatically

When you visit our website, certain information may be collected automatically through our website hosting platform and analytics tools.

This may include:

Information about your browser, device and operating system
Your IP address
General geographical location
Pages you visit on our website
The website or source that referred you to us
How you interact with our website, including clicks, scrolling and navigation
The date, time and duration of your visit

We use this information to understand how visitors use our website, monitor its performance and improve the experience we provide.

3. Website hosting and Squarespace Analytics

Our website is hosted by Squarespace.

Squarespace may collect technical and usage information when you visit our website, including information about your browser, device, network, IP address and the pages you view.

This information helps Squarespace operate, maintain, secure and improve its platform.

We also use Squarespace Analytics to understand website traffic and visitor activity. This may include information about page views, traffic sources, visitor behaviour and website performance.

You can find more information about how Squarespace handles personal information in the Squarespace Privacy Policy.

4. Google Analytics

We use Google Analytics 4 (GA4), a web analytics service provided by Google, to understand how visitors find and use our website.

Google Analytics helps us understand:

How many people visit our website
Which pages are most frequently viewed
How visitors find our website, including through search engines and other websites
How visitors navigate and interact with our content
General information about visitors' devices, browsers and locations
How effectively our website supports visitors in finding relevant information

Google Analytics may use cookies and similar technologies to collect information about website activity.

Google Analytics 4 does not log or store individual IP addresses, although Google may process IP address information to determine approximate geographical location and provide its services.

We use this information to monitor website performance, improve our content and make our website more useful to visitors.

Google Analytics cookies are only activated when you have given your consent through our cookie banner.

You can withdraw or change your consent at any time using the cookie settings available on our website.

For more information, visit Google's Privacy Policy.

5. Cookies

Cookies are small files or pieces of text stored on your device when you visit a website.

Our website uses cookies and similar technologies to operate securely, remember certain preferences and understand website activity.

Essential cookies

Essential cookies are necessary for the website to function correctly.

These may be used by Squarespace to provide core website functionality, maintain security and support essential features.

Essential cookies do not require your consent where they are strictly necessary to provide the website services you request.

Analytics and performance cookies

We use analytics and performance cookies through Squarespace Analytics and Google Analytics to understand how visitors use our website.

These cookies help us identify popular content, monitor website performance and make improvements.

Where consent is required, these cookies will only be activated after you have agreed to their use.

You can accept, reject or change your preferences for non-essential cookies through our website's cookie banner or cookie settings.

For more information about Squarespace cookies, visit The cookies Squarespace uses.

You can also manage or delete cookies through your browser settings.

6. How we use your personal information

We use personal information for the following purposes:

To respond to enquiries and requests for information
To communicate with prospective and existing clients
To provide and manage our consultancy services
To operate, maintain and secure our website
To understand website traffic and improve our content and services
To meet applicable legal and regulatory obligations

We do not sell your personal information.

7. Our lawful basis for processing personal information

Under UK data protection law, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we rely on:

Legitimate interests: To respond to business enquiries, communicate with clients, operate our website and improve our services, where these interests are not overridden by your rights.

Contractual necessity: Where processing is necessary to provide services under a contract or take steps towards entering into a contract.

Consent: Where you agree to the use of non-essential analytics cookies or other activities requiring consent.

Legal obligation: Where we need to process information to comply with applicable laws or regulations.

Where we rely on consent, you can withdraw it at any time.

8. Sharing your information

We may share personal information with trusted third-party service providers where necessary to operate our website and business.

These may include:

Squarespace, which hosts our website and provides website functionality and analytics.
Google, which provides Google Analytics services.
Other service providers used to manage business communications and deliver our services, where applicable.

These providers may process information on our behalf or, in some circumstances, for their own purposes as described in their respective privacy policies.

We do not sell personal information to third parties.

We may also disclose information where required by law or where necessary to protect our legal rights.

9. International data transfers

Some of our technology providers, including Squarespace and Google, may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place, in accordance with applicable UK data protection law.

These may include recognised adequacy arrangements or approved contractual safeguards.

10. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including meeting legal, accounting or reporting obligations.

Information submitted through enquiries may be retained for as long as necessary to respond to your request and manage any resulting business relationship.

Website analytics information is retained in accordance with the settings and retention periods of the relevant analytics platforms.

When personal information is no longer required, we will delete or securely dispose of it where appropriate.

11. Your data protection rights

Under UK data protection law, you may have the right to:

Request access to the personal information we hold about you
Ask us to correct inaccurate or incomplete information
Request deletion of your personal information in certain circumstances
Ask us to restrict how your information is processed
Object to certain types of processing
Request the transfer of your information where applicable
Withdraw consent where processing is based on consent

These rights are subject to certain legal conditions and exceptions.

To exercise any of these rights, please contact us using the details provided in this policy.

You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Visit www.ico.org.uk for more information.

12. Links to other websites

Our website may contain links to external websites.

We are not responsible for the privacy practices or content of third-party websites. We encourage you to review their privacy policies before providing personal information.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, technology or legal obligations.

Any updates will be published on this page, together with the date of the latest revision.

14. Contact us

If you have any questions about this Privacy Policy or how your personal information is handled, please contact: