Privacy, cyber security and IT governance for small businesses

You need someone who understands the technology and the compliance, and who can explain both to your team in plain English.

I help businesses get compliant, answer the questions clients and insurers ask, and stay on top of it, without hiring a full-time governance lead.

Book A Free Call See My Services

IAPP CIPT certified · CompTIA Security+ · 25 years in IT · Based in Lancaster

Has one of these IT governance challenges landed on your desk?

“Our insurer wants answers before renewal”
Cyber insurance forms ask about MFA, backups, patching and incident plans. A wrong answer can affect a claim.

“A client has sent us a security questionnaire”
Larger customers increasingly vet their suppliers. I help you answer accurately, fix the gaps it exposes and build a set of standard answers you can reuse.

“Staff are already using ChatGPT”
If there’s no policy, client data may already be going into AI tools. I help you choose the right tools, set sensible rules and train your team to use them safely.

“Someone has asked for a copy of their data”
A subject access request has a one-month deadline. If you have no process, the clock is already running. I put the procedures, records and notices in place before you need them.

How Privacy Ally works

  • A free 30-minute call. We talk through what has prompted you to look for help and whether I’m the right fit. If I’m not, I’ll tell you.
  • A fixed-price assessment. I review your setup with your team and your IT provider. There’s no jargon, and nobody is left feeling like they’ve failed a test.
  • A plain English report and action plan. You get a prioritised list of what to fix, who should fix it and what can wait. I can stay on to help deliver it, or hand it over to your team.
Book A Free Call See My Services

IAPP CIPT certified · CompTIA Security+ · 25 years in IT · Based in Lancaster

Why businesses work with Privacy Ally

Policies your team will actually use. A policy only works if people follow it. I’ve spent 25 years helping staff understand why security matters, not just what the rules are.

I work alongside your IT provider, not against them. I don’t sell IT support or hardware. Your IT company runs your systems. I make sure the governance around them holds up to scrutiny.

Technology and compliance in one person. I’m qualified in both privacy technology (CIPT) and security (Security+) and I’ve audited IT systems across various LTD and PLC groups.

I’ll only use the details you provide to reply to your message. I won’t add you to a mailing list or pass your data to anyone. See the Privacy Notice for the full picture.

Not sure where to start?

Tell me what’s prompted you to look and I’ll reply within one working day.
As they say, it’s good to talk.

Latest Thoughts & Insights

Practical guides for small businesses