PGP Growth Limited
Privacy Policy
PGP Growth Limited is the data controller for personal data processed through our website and in connection with our client and participant relationships.
Last updated: August 2026
Who we are
PGP Growth Limited (“PGP Growth”, “we”, “us”, “our”)
PGP Growth works with ambitious businesses and their leaders to support strategy, growth, leadership and organisational performance.
- Website
- www.pgpgrowth.co.uk
- Company number
- 14561626
- Registered office
- PGP Growth Limited, Level One, Basecamp Liverpool, 49 Jamaica Street, Liverpool L1 0AH
- Contact
- kirsten@pgpgrowth.co.uk
Our services
Our services include business mentoring and advisory support, strategy facilitation, leadership development and structured development programmes, including online programmes.
Personal data we collect
We collect and process personal data that is relevant to the services we provide.
This may include:
- Name, email address and telephone number
- Job title and company details
- Information provided through enquiry forms
- Information you choose to share during initial conversations or discovery meetings
Where you work with us or participate in one of our programmes, we may process:
- Contact and business information
- Session notes
- Goals, actions and feedback
- Written reflections and exercise submissions
- Programme progress information
- Communications relating to your engagement with us
The nature of our work means clients and participants may sometimes choose to share information about their business, role, colleagues or circumstances. We only use this information where relevant to providing the service.
Where we use an identifiable testimonial, case study or other client story, we will do so with appropriate permission.
Website, marketing and meeting information
When you use our website, we may collect technical information such as:
- IP address
- Browser and device information
- Website usage and interaction data
- Cookie and analytics information
Please see our Cookie Policy for further information.
Where applicable, we may process contact details, communication preferences and email engagement information.
We will only send electronic marketing where we have an appropriate lawful basis to do so, and you can unsubscribe at any time.
Where you arrange or participate in meetings with us, we may process information through services such as Calendly and Microsoft Teams.
Where a meeting is to be recorded or transcribed, participants will be informed as appropriate.
Purchases and payments
Where you purchase products or services from PGP Growth, we may collect:
- Name and contact details
- Billing information
- Order information
- Information required to provide the product, programme or service purchased
Payments may be processed securely by third-party payment providers such as Stripe.
PGP Growth does not store your full payment card details.
We use purchase and payment information to:
- Process and fulfil orders
- Provide access to products, programmes and services
- Manage billing, refunds and support enquiries
- Prevent fraud
- Maintain appropriate financial records
- Comply with tax, accounting and other legal obligations
Financial and transaction records may be retained for up to seven years where required for tax, accounting or legal purposes.
How we collect personal data
We may collect personal data through:
- Our website and enquiry forms
- Direct email, telephone or other communications
- Introductory and discovery conversations
- Mentoring, advisory and development sessions
- Programme participation
- Online learning platforms
- Appointment booking systems
- Purchases and payments
- Website analytics and cookies
Lawful basis for processing
Under UK data protection law, we must have a lawful basis for processing personal data.
Depending on the circumstances, we may rely on:
- Contract where processing is necessary to provide a service you have purchased or to take steps at your request before entering into a contract.
- Legitimate interests where processing is reasonably necessary for operating and developing our business, managing client relationships and improving our services, provided those interests are not overridden by your rights.
- Consent where we ask for your permission, for example for certain marketing activities, cookies or identifiable testimonials.
- Legal obligation where we need to process information to comply with legal, regulatory, tax or accounting requirements.
How we use personal data
We may use personal data to:
- Respond to enquiries
- Provide mentoring, advisory and development services
- Deliver programmes and programme materials
- Support your progress and engagement
- Communicate with you about our work together
- Arrange meetings and appointments
- Process purchases and payments
- Manage our client and business administration
- Improve our services, programmes and website
- Maintain appropriate business and financial records
- Comply with legal and regulatory requirements
We do not sell your personal data.
Confidentiality, sharing and providers
We treat information shared through our client and participant relationships with a high level of confidentiality.
Information shared during mentoring, advisory or programme participation will not ordinarily be disclosed to other parties without an appropriate reason or permission to do so.
We may use anonymised or aggregated insights arising from our work to improve our services, programmes, tools and materials, provided individuals or businesses cannot reasonably be identified from that information.
Identifiable testimonials, case studies or client stories will only be used with appropriate permission.
Where you participate in one of our online programmes, your information may also be processed through the learning platform used to deliver that programme.
This may include:
- Account and login information
- Programme activity
- Exercise responses and written submissions
- Progress information
- Preferences associated with your account
This information is used as necessary to provide and support your participation in the programme.
We use trusted third-party service providers to help us operate our business and deliver our services.
Depending on the services you use, these may include providers supporting website hosting and analytics, email and communications, appointment scheduling, video meetings, transcription and meeting notes, payment processing, accounting and administration, online learning, cloud storage and business systems.
Examples may include Microsoft, Calendly, Stripe, Xero, Google, Fireflies and our online learning platform provider.
These organisations may process personal data on our behalf or, in some circumstances, act as separate data controllers. We only share information that is reasonably necessary for the relevant purpose.
We may also disclose personal data where required by law or where necessary to establish, exercise or defend legal rights.
Some of the technology providers we use may process or store personal data outside the United Kingdom.
Where UK data protection law requires additional safeguards for an international transfer, we take appropriate steps to ensure those safeguards are in place. These may include UK adequacy regulations or approved contractual safeguards.
How long we retain personal data
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and regulatory requirements.
Typical retention periods may include:
- Enquiries: up to 24 months
- Client records: generally up to 6 years following the end of the client relationship
- Financial and transaction records: up to 7 years where required
- Programme information: for as long as reasonably necessary to provide programme access and support, subject to legal or contractual requirements
- Testimonials and case studies: while we continue to have permission and a legitimate reason to use them
- Analytics information: according to the retention settings of the relevant analytics service
Some information may be deleted earlier where it is no longer required.
Your rights
Depending on the circumstances, UK data protection law gives you rights including the right to:
- Ask for a copy of personal data we hold about you
- Ask us to correct inaccurate or incomplete information
- Ask us to delete personal data in certain circumstances
- Ask us to restrict the processing of your information
- Object to certain processing
- Request transfer of certain information
- Withdraw consent where processing is based on consent
Not all rights apply in every circumstance.
To exercise your rights or ask a question about how we use your personal data, contact kirsten@pgpgrowth.co.uk.
You also have the right to complain to the Information Commissioner’s Office (ICO) if you are concerned about how your personal information has been handled.
Security and professional standards
We use appropriate technical and organisational measures designed to protect personal data from unauthorised access, loss, misuse or disclosure.
These include measures such as:
- Secure cloud-based systems
- Appropriate access controls
- Password and account security
- Encryption where appropriate
- Limiting access to information to those who reasonably require it
Meeting recordings, transcripts or notes are stored securely and retained only for as long as reasonably necessary for the purpose for which they were created.
PGP Growth Limited maintains appropriate Professional Indemnity Insurance in relation to the professional services it provides.
Cookies and updates to this policy
Our website uses essential cookies required for functionality and may use optional cookies for purposes such as analytics, functionality and marketing.
Where consent is required, non-essential cookies will only be used in accordance with your cookie preferences.
Please see our Cookie Policy for further information.
We may update this Privacy Policy from time to time to reflect changes to our services, technology or legal obligations.
The latest version will always be available on our website.
Questions about your personal data?
Contact PGP Growth if you would like to ask about how your personal data is used or exercise your data protection rights.
