About Firebird
Keeping compliance simple
Firebird is a specialist consultancy providing practical support in data protection, AI governance and cyber security. We work with schools, SMEs and larger organisations, helping them understand their obligations, manage risk and put proportionate compliance arrangements into practice.
Our approach is straightforward: clear advice, practical solutions and specialist support without unnecessary jargon or complexity.
.png/:/rs=w:400,cg:true,m)
Our story
Firebird was founded in 2017 with a simple aim: to make data protection easier to understand and easier to put into practice. At the time, schools were preparing for the arrival of the GDPR and many were facing a huge amount of uncertainty. They needed more than policies and legal wording, they needed someone they could turn to for practical advice, reassurance and ongoing support.
That is where Firebird began.
We started by helping schools understand what the new law meant for them, supporting them with the everyday realities of handling pupil, parent and staff information, and providing the independent DPO support they needed.
As Firebird grew, so did the organisations asking for our help.
Today, we support schools, SMEs and larger organisations with data protection, AI governance and cyber security. The services have expanded, but our approach has stayed the same: keep things clear, practical and proportionate, and be there when our clients need us.
We are proud that many of our clients have worked with us from the start and continue to trust Firebird as an extension of their own team.
A different kind of consultancy
We do more than provide policies, templates or tell you what the law says. Firebird is built around personal, hands-on support and close working relationships.
We take the time to get to know our clients, understand how their organisation works and become a trusted extension of their team.
There are no call centres or anonymous support tickets, when you need help, you can pick up the phone and speak to an experienced specialist who already understands your organisation and can help you work through the issue.
Whether it is an everyday query, a difficult request or data protection complaint, a serious data breach, a new AI tool, supplier risk or a complex compliance project, we are there to provide clear, practical advice when you need it.
Who we support
Our team has experience across a wide range of organisations, including:
- schools, academies and multi-academy trusts;
- SMEs and growing businesses;
- large and enterprise organisations;
- aesthetics and dentistry;
- technology and online service providers;
- charities and social enterprises; and
- public sector organisations.
That breadth of experience allows us to bring practical lessons from different sectors while tailoring our advice to each organisation.
Meet Firebird's Leadership Team
Amber Badley LLM
Charlotte Staples CIPP/E, CIPM
Charlotte Staples CIPP/E, CIPM
Founder and CEO
Amber founded Firebird in 2017 after more than two decades working in data protection and information governance.
She has supported organisations across the public, private and third sectors with complex data protection matters including Subject Access Requests, information sharing, serious personal data breaches, regulatory
Founder and CEO
Amber founded Firebird in 2017 after more than two decades working in data protection and information governance.
She has supported organisations across the public, private and third sectors with complex data protection matters including Subject Access Requests, information sharing, serious personal data breaches, regulatory engagement and compliance programmes.
In 2019, Amber was invited by the Department for Education to join its panel of data protection experts, helping develop national GDPR guidance for schools. She has also given evidence before the Information Tribunal and was a witness in Dransfield v Information Commissioner and Devon County Council [2015].
Amber holds a Master’s Degree in Information Rights Law and is passionate about making data protection practical, proportionate and accessible.
Charlotte Staples CIPP/E, CIPM
Charlotte Staples CIPP/E, CIPM
Charlotte Staples CIPP/E, CIPM
Senior Privacy Consultant
Charlotte has over a decade of experience providing privacy and DPO support to major commercial and non-profit organisations.
Her specialist areas include direct marketing and PECR, cookies and tracking technologies, AI governance, security incidents and international privacy compliance.
Charlotte holds a Graduate
Senior Privacy Consultant
Charlotte has over a decade of experience providing privacy and DPO support to major commercial and non-profit organisations.
Her specialist areas include direct marketing and PECR, cookies and tracking technologies, AI governance, security incidents and international privacy compliance.
Charlotte holds a Graduate Diploma in Law and is a qualified CIPP/E and CIPM privacy professional.
Tim Moorey CISSP, CISM
Charlotte Staples CIPP/E, CIPM
Tim Moorey CISSP, CISM
Senior Cyber Security Consultant
Tim has more than 20 years’ experience in cyber security and information assurance across defence, law enforcement, government, civil nuclear and financial services.
He has held senior roles including CISO and national cyber policy positions and has led cyber maturity, resilience and incident preparedness pr
Senior Cyber Security Consultant
Tim has more than 20 years’ experience in cyber security and information assurance across defence, law enforcement, government, civil nuclear and financial services.
He has held senior roles including CISO and national cyber policy positions and has led cyber maturity, resilience and incident preparedness programmes in complex organisations.
Tim is a CISSP, ISO 27001 Lead Auditor and Certified Ethical Hacker and brings a pragmatic, risk-based approach to helping organisations strengthen cyber resilience.