Privacy Policy
Last updated: 11 October 2026
Who we are
Headline Consulting is the advisory practice founded by Sir Michael Wilshaw, providing mentoring and support to school leaders. We are the data controller for personal information collected through this website, and we handle it in line with the UK GDPR and the Data Protection Act 2018.
Information we collect
Enquiries: when you use an enquiry or contact form on this website, we collect the details you enter: your name, school or organisation, email address and the content of your message. The same applies if you email us directly.
Technical information: like all websites, our hosting provider automatically processes standard connection data when you visit, such as your IP address, browser and device type, the pages requested and the time of the request. We use this to deliver the site and keep it secure. We also use your IP address briefly to limit repeated or automated form submissions.
We do not ask for, and you should not include, sensitive personal information (such as health details) in your message.
How we use your information
We use the information you send us to read and respond to your enquiry and, where you wish to go ahead, to arrange mentoring conversations and provide our services. We use technical information to operate, secure and protect the website from misuse.
We do not sell your personal information, and we do not use it for third-party marketing.
Legal basis for processing
We process enquiry information because it is necessary to take steps at your request before entering into a contract, and because we have a legitimate interest in responding to people who contact us. We process technical information on the basis of our legitimate interest in keeping the website secure and working properly. If we ever rely on your consent for anything else, we will ask for it clearly and you may withdraw it at any time.
Who we share your information with
We use a small number of trusted service providers, who process personal information on our behalf and only to provide their service to us:
Resend delivers the enquiries submitted through the website forms to our inbox as email. Microsoft 365 (Microsoft) provides our email and productivity services, where enquiry emails are received and stored. Vercel hosts the website and processes standard connection data when you visit it. Where enabled, Cloudflare Turnstile checks that enquiry form submissions come from a real person rather than an automated script.
The website does not store form submissions in a database; they are delivered by email only. We may also disclose information where we are legally required to do so.
International transfers
Some of these providers are based in, or may process data in, countries outside the UK, including the United States. Where that happens, we rely on the safeguards required by UK data protection law, such as an adequacy arrangement (for example the UK-US data bridge) or standard contractual clauses with the UK Addendum.
How long we keep your information
We keep enquiry information only for as long as it is needed to deal with your enquiry and any work that follows, and for as long as the law requires, and then delete it securely. Technical information is kept by our hosting provider for a limited period under its standard retention practices.
Cookies
This website currently uses only essential cookies and similar technologies, which keep it secure and working, such as spam protection on the enquiry forms. It does not use advertising or analytics cookies.
When you first visit, a banner lets you choose "Accept all" or "Essential only". We store that choice in a first-party cookie called hc_cookie_consent for 6 months so we do not ask you again. If we introduce any optional cookies in future, they will only be switched on if you chose "Accept all", and we will update this policy first. You can change your choice at any time using "Cookie settings" in the footer.
Some pages link to articles and profiles on other websites. Those sites have their own privacy and cookie practices, which we do not control.
Your rights
You have the right to ask for a copy of the personal information we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and, where it applies, to receive it in a portable format or to withdraw consent. To exercise any of these rights, contact us using the details below. We will respond within one month.
If you are unhappy with how we have handled your information, you may also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Contact us
For any questions about this policy or your information, email michael@headlineconsulting.co.uk.