Privacy Policy | PENN POWER CONSULTING

Penn Power Consulting Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Penn Power Consulting Ltd is a UK-based consultancy providing marketing, communications, insurer relations, brand, and commercial advisory services.

Registered office: 19 Warren Park Way, Enderby, Leicester, LE19 4SA
Company number: 16458707

2. Personal data we collect

We may collect and process the following personal data:

Name, job title, and organisation
Contact details (email address, telephone number, postal address)
Business correspondence and enquiry details
Information provided during meetings, calls, or email communications
Website usage data (IP address, browser type, device information)

We do not intentionally collect special category data (such as health data) unless explicitly required for a specific engagement and agreed in writing.

3. How we collect personal data

Personal data may be collected when you:

Contact us via our website, email or telephone
Engage us for consultancy services
Subscribe to communications (if applicable)
Interact with our website.

4. How we use your data

We use personal data only where there is a lawful basis to do so. This includes:

Responding to enquiries
Delivering contracted consultancy services
Managing client relationships and communications
Issuing invoices and managing payments
Improving our website and services
Complying with legal or regulatory obligations

We do not sell or rent personal data to third parties.

5. Lawful basis for processing

We process personal data under one or more of the following lawful bases:

Contractual necessity; to perform a contract or take steps prior to entering one
Legitimate interests; for business operations and relationship management
Legal obligation; where required by law
Consent; where explicitly given (e.g. marketing communications).

6. Data sharing

We may share personal data only where necessary, including with:

Professional advisers (e.g. accountants, legal advisers)
IT and website service providers
Regulators or authorities where legally required

All third parties are required to respect the security and confidentiality of personal data.

7. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, or disclosure. Access to personal data is limited to those who need it for legitimate business purposes.

8. Data retention

Personal data is retained only for as long as necessary to fulfil its purpose, including legal, accounting, or reporting requirements. When data is no longer required, it is securely deleted or anonymised.

9. Your rights

Under UK data protection law, you have the right to:

Access your personal data
Request correction of inaccurate data
Request erasure of data (where applicable)
Object to or restrict processing
Request data portability
Withdraw consent at any time (where processing is based on consent)

Requests should be made in writing to the contact details above. We will respond within the statutory timeframe.

10. Cookies

Our website may use cookies to improve functionality and user experience. You can control or disable cookies through your browser settings.

11. External links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party sites.

12. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the revised policy will apply from the date of publication.

13. Complaints

If you have concerns about how we handle your personal data, you may contact us directly. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).