In today's interconnected world, privacy and technology are inextricably linked. We understand this critical relationship and offer comprehensive consulting services to help organisations enjoy the benefits of data, responsibly.

We go beyond compliance, empowering you to build a culture of privacy and security that fosters trust with customers and strengthens your brand. We bring deep industry knowledge and a practical approach to every engagement, helping you achieve your business goals while safeguarding sensitive data.

Based in London, we operate remotely or onsite across the UK and further afield as required, and can work independently or embedded in your team, on a flexible basis.

Our Services

Privacy Program Development

We help you build a robust privacy program tailored to your specific needs and industry codes. This includes developing policies, procedures, and governance frameworks to ensure compliance with GDPR, DPA 2018, PECR and other relevant international regulations.

Data Mapping & Classification

Understanding where your data lives and how it travels through your organisation is crucial for effective privacy management. We conduct thorough data mapping, ROPA and classification exercises to identify sensitive data and implement appropriate safeguards.

Cybersecurity Risk Management

We can assess your organisation's vulnerabilities and develop comprehensive risk management strategies to protect your valuable assets and attain industry certifications including SOC2 and ISO 27001.

Technology Transformation with Privacy by Design

We guide your technology transformation initiatives, ensuring privacy is embedded into every new process and product developed. This approach identifies risks and unlocks the value of your investments in fast-moving areas of technology like AI, blockchain and marketing automation.

Strategic Data Protection Officer (DPO)

We offer a full range of DPO services on a retained basis, including DPIA's, Privacy Impact Assessments, audits, consent pathway analysis and data governance for clients in regulated industries like financial services.

Interim Management & Training

We can support your business on the ground, source and manage teams and suppliers with a privacy and cyber focus. We also create and deliver engaging, interactive training content to educate your employees on privacy and security best practice, fostering a culture of accountability across your organisation.

Clients & Case Studies

Since 2017 we have worked with a wide range of businesses and government bodies in the UK, Europe and worldwide to provide privacy and cyber security services.

Sectors we cover include financial services, FMCG, AdTech, SAAS platforms and social housing with a specialism in blockchain and AI technologies. Here are a few of our recent client stories:

NatWest

"I'd like to call out Gilbert Hill who played a crucial role in supporting a large-scale privacy permissions project. His expertise, dedication, and problem-solving skills were invaluable in ensuring the project’s success.

Gilbert demonstrated a deep understanding of privacy regulations and technical implementation, proactively identifying challenges and delivering effective solutions. Not only that, his ability to comprehend the complexities of systems and processes were instrumental to the success of the project.

Operating within a highly regulated and intricate organizational landscape, Gilbert demonstrated exceptional skill in balancing compliance requirements with business needs. He expertly navigated stakeholder expectations across multiple teams, ensuring alignment between legal, risk, technology, data and operational functions. His ability to collaborate with stakeholders and manage complex requirements made a significant impact on the project’s progress and outcomes."

Contactzilla

"Contactzilla engaged with PrivTech to assist with our GDPR compliance across a number of international markets and sectors, including policies, audits and achieving SOC 2 certification.

Having worked with Gilbert at a previous organisation I was confident he would provide us with exactly the support and direction we needed, I wasn't mistaken. I truly appreciate Gilbert's pragmatic approach to compliance and his desire to put meaningful privacy controls in place. I hope to continue a long working relationship together."

SNG (formerly Sovereign Housing Association)

"Gilbert provided support and practical advice on the lawful basis for our marketing communications, and the way consent is managed on our websites as part of SNG's merger and rebranding.

Gilbert is a pleasure to work with. He has taken the time to really understand our issues and challenges, as a sector and for our specific business, and to offer the right support across several related topics. His advice is excellent and he explains things in a way a non-expert can understand."

Google

"Gilbert and I were fortunate to meet during a Data Privacy and Consent co-design session for European Commission privacy advisors and policy makers. This brought together preeminent thought leaders on data privacy concerns, especially regarding how end users experience consent. Gilbert brought his deep subject matter expertise on the cookie consent problems that continue to persist. He also provided his informed perspective on how to keep the user at the center of a data privacy experience.

We conducted a high level innovation co-design research session. Gilbert brought the voice of innovation for the user, advocating for more comprehensible consents designed for the average person. His energy contributed to the incredibly productive and friendly exchanges we had in the room, and I wish we could have spent more time talking and co-creating together.

I consider Gilbert a Trust expert, and would be thrilled to include his feedback in any future work we may do together."

Latest News

Privacy & Security in Data - what’s the difference?

We’re unusual as a small consultancy in that we cover both data privacy and security in our work, with technology also a central theme -...

Digital Verification for companies that’s portable, and fit for purpose - UK Fintech leads the way

The pursuit of growth in the context of a challenging global economy has been a mantra in the UK for some time, with successive...

Cookies & Consent - steps businesses need to take in 2025

With the first of April already upon us it’s no joke that cookies, and their role in harvesting the data which feeds online advertising,...

Our People

Gilbert Hill

Gilbert is a Privacy Technologist and adviser on data governance, strategy and ethics with a focus on AI, blockchain and marketing automation. As MD of an award-winning London digital agency, he founded Europe's leading cookie compliance SAAS product, now part of the OneTrust platform which powers over 80% of European websites.

He now advises businesses, startups and public bodies on strategic and practical approaches to adoption of new technologies, often in the context of due diligence, fundraising and new product development. He sits on the board of the Data & Marketing Commission, the AI Standards Hub for UK Regulators, teaches GDPR at the Institute of Data Marketing and speaks on stage and in the media on these topics in the UK, Europe and North America.

Jessica Figueras

Jessica is a strategist working with government and regulated industries on cyber security, digital trust and the role of tech in civil society. She is co-founder of CxB (Cyber Governance for Boards), a non-profit network that supports boards and non-executive directors to strengthen oversight of cyber security, and a Governor at the University of Westminster.

Previously she was Vice Chair and a Founding Trustee at the UK Cyber Security Council and chief executive of Pionen, a cyber security firm working with government and critical national infrastructure. Jessica is a sought-after speaker and adviser. She won an Unsung Heroes in Cybersecurity award and has been named one of Computer Weekly's Most Influential Women in UK Tech for four successive years.