Effective 25 July 2026
Privacy notice
This notice explains how High City Consulting Ltd uses information supplied by programme prospects and learners.
Who is responsible for your information
High City Consulting Ltd is the data controller. Company number 13141096. Registered office: 20–22 Wenlock Road, London, England, N1 7GU.
Contact: seyi.kusa@highcityconsulting.com.
Information we may collect
- Contact details, current role, experience and programme goals.
- Application answers, communication preferences and enrolment status.
- Payment status and transaction references. We do not intend to store full payment-card details.
- Attendance, submitted course work, assessment feedback and support requests.
- Accessibility or reasonable-adjustment information you choose to provide through the restricted support route.
- Optional feedback, testimonial and marketing-consent records.
- Basic website and form usage information where permitted.
Why we use it
| Purpose | Expected basis |
|---|---|
| Assess applications and answer pre-contract questions | Steps requested before entering a contract and legitimate interests |
| Take payment and deliver the programme | Contract and legal obligations |
| Provide support, feedback and course administration | Contract and legitimate interests |
| Keep financial and compliance records | Legal obligations |
| Send optional email marketing | Consent or another permitted basis where applicable |
| Use a testimonial, image or case study publicly | Separate, specific permission |
Who receives it
Initial enquiries may be sent to our business email account or through the programme WhatsApp link. If you choose WhatsApp, Meta and WhatsApp process information under their own privacy terms. We may also use trusted service providers for forms, payments, video meetings, course delivery and hosting. We assess providers and use appropriate safeguards where information is transferred internationally.
We do not sell applicant or learner information.
How long we keep it
Unsuccessful or incomplete application information is normally kept for no longer than 12 months. Core contract, payment and tax records may be kept for the legally required period. Course work and recordings have the access and retention periods stated in the enrolment information.
Marketing
Programme administration is separate from marketing. Marketing email requires a clear choice where consent is relied on, and every message will offer an unsubscribe route. Declining marketing does not affect an application or enrolment.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or portability. You may withdraw consent at any time where consent is used. Contact us using the address above. You may also complain to the UK Information Commissioner’s Office.
Course and AI data rule
The programme uses synthetic course data. Learners must not upload employer, client, customer or other confidential personal information into the labs or generative-AI services used for course work.
Changes
The final notice will show its effective date. Material changes affecting enrolled learners will be communicated directly.