Privacy Policy

Last updated: 27^th October 2025

1. Introduction

Alac Pengelly Consultancy (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.

This privacy policy explains how we collect, use, store, and protect your personal information when you engage with our consultancy services, visit our website, or communicate with us.

We process your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Business name: Alac Pengelly Care Consultancy
Registered address: Warrenden, Conghurst Lane, Hawkhurst Kent TN185EB
Company number: [if applicable]
Email: [Contact Email]
Telephone: 07887638944

We are the data controller for the personal data we process in connection with our consultancy services.

3. The Personal Data We Collect

We may collect and process the following types of personal data:

• Identity Data: name, title, job title, organisation, professional background.
• Contact Data: business address, email address, telephone number.
• Engagement Data: information provided in the course of providing consultancy services, such as meeting notes, project details, and correspondence.
• Financial Data: bank details, payment information, invoice details.
• Marketing and Communications Data: preferences for receiving marketing from us, and communication preferences.
• Technical Data (if using our website): IP address, browser type, and website usage information collected via cookies or analytics tools.

We do not collect special category data (such as health information or data on race, religion, or political opinions) unless necessary for a specific project and only with your explicit consent.

4. How We Collect Your Data

We collect data in several ways:

• Directly from you when you contact us, sign a contract, or request a proposal.
• During the delivery of our consultancy services (e.g. through calls, meetings, and correspondence).
• When you visit our website or fill out an online form.
• From publicly available sources such as LinkedIn or your company’s website.

5. How We Use Your Personal Data

We will only use your personal data where the law allows us to. The main purposes include:

• To provide consultancy advice, reports, and related services.
• To communicate with you about our work, proposals, or updates.
• To manage payments, invoices, and client accounts.
• To comply with legal or regulatory obligations (e.g. tax record-keeping).
• To send marketing communications (only if you have opted in).

Our lawful bases for processing your data are:

• Contract: to perform our obligations under a contract with you.
• Legitimate interests: for running and growing our business and improving our services.
• Legal obligation: to comply with UK law (e.g. financial regulations).
• Consent: for marketing and other non-essential communications.

6. How We Share Your Data

We may share your data with:

• Service providers (e.g. IT support, email hosting, accounting or payment processors).
• Professional advisers (e.g. accountants, legal advisors).
• Regulators or authorities if required by law.

All third parties we work with are required to process your data securely and in accordance with UK data protection law.
We never sell your data.

7. International Transfers

If your data is transferred outside the UK (for example, where we use a cloud service provider with servers overseas), we ensure appropriate safeguards are in place such as UK-approved Standard Contractual Clauses.

8. Data Security

We use appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access, including secure storage, encryption, and restricted access only to authorised personnel.

9. Data Retention

We only keep your personal data for as long as necessary for the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

Typically, we retain:

• Client project data: 6 years after the end of the engagement.
• Financial and invoicing records: 6 years (to meet HMRC requirements).
• Marketing data: until you withdraw consent or unsubscribe.

After that period, your data is securely deleted or anonymised.

10. Your Legal Rights

Under the UK GDPR, you have the following rights:

• Access – request a copy of your personal data.
• Rectification – request correction of inaccurate or incomplete data.
• Erasure – request deletion of your personal data (“right to be forgotten”).
• Restriction – request limitation of how we use your data.
• Data portability – request transfer of your data to another organisation.
• Objection – object to processing based on legitimate interests or direct marketing.

You can exercise these rights by contacting us at [Contact Email].

If you are not satisfied with how we handle your request, you have the right to complain to the Information Commissioner’s Office (ICO):
Website: https://www.ico.org.uk
Telephone: 0303 123 1113

11. Cookies and Website Use

If you use our website, we may use cookies or similar technologies to improve functionality and analyse traffic. You can control your cookie preferences through your browser settings.
For more details, please see our Cookie Policy [insert link if available].

12. Updates to This Policy

We may update this privacy policy periodically. Any changes will be posted on our website with an updated revision date.

13. Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact:

Data Protection Contact: Alac Pengelly
Email: alac_p@hotmail.com
Address: Warrenden, Conghurst Lane, Hawkhurst, Kent TN18 5EB