Privacy Notice

1. Who we are

This website, peoplenprocess.com, is operated by People ’n’ Process (“we”, “us”, “our”). We provide paraplanning, accounting and bookkeeping, back-office and business automation support to businesses in the United Kingdom and Australia.

For personal information collected through this website, we are the controller under UK data protection law and the entity responsible for it under the Australian Privacy Act 1988. You can contact us about privacy at any time at info@peoplenprocess.com.

This notice covers this website and enquiries made through it. If you become a client, information we handle while delivering our services is covered by the terms of that engagement.

2. Information we collect

When you send an enquiry

The contact form asks for:

• your full name, work email address and company name
• your country
• your phone number, if you choose to give it
• the service you are interested in
• your message

Please keep enquiries to general business information. Do not include client records, account details or other sensitive documents.

When you email us

If you email us directly, we receive your email address, your name as it appears in your email, and anything you include in the message.

Collected automatically

• Technical information. When your browser loads a page, our website host and the services listed in section 4 receive your IP address and standard technical details such as your browser type. Our host may keep these in server logs.
• Spam protection. When you use the contact form, Cloudflare Turnstile checks that the form is being used by a person and not an automated program. To do this it processes your IP address and information about your browser and device.
• Enquiry records. The enquiry email we receive includes the IP address it was sent from. To limit repeated submissions, our server also keeps a scrambled (hashed) version of that IP address for one hour.
• Analytics, only if you accept. If you accept analytics cookies, Google Analytics collects information about how you use this website, such as the pages you visit, how long you stay, how you arrived, your approximate location (city or region), and your device and browser. Google Analytics does not log or store IP addresses for this. If you reject analytics cookies, Google Analytics does not load.

We do not use advertising or remarketing tools on this website.

3. How we use it

We use your information to:

• read and respond to your enquiry, and discuss whether and how we can support your business
• keep a record of our correspondence with you
• protect the website and contact form from spam and misuse
• understand how visitors use the website so we can improve it, if you accept analytics cookies
• meet our legal and regulatory obligations

We do not sell your information, and we do not add enquiries to marketing lists.

Our legal basis (UK)

Under UK data protection law, we rely on:

• steps before a contract, when you ask us about our services
• legitimate interests, in responding to business enquiries, keeping records of them, and keeping our website secure
• consent, for Google Analytics, which runs only if you accept analytics cookies. You can withdraw consent at any time using the Cookie settings link at the bottom of every page.
• legal obligation, where the law requires us to keep or share information

4. Who we share it with

We share personal information only with service providers that help us run this website and respond to enquiries, and only as far as they need it:

• Our website hosting and email providers, which store the website, keep enquiries in a database on their servers, and deliver enquiry emails to us.
• Cloudflare, which provides Turnstile spam protection on the contact form and, through cdnjs, delivers a code library this website uses for its animations.
• Google, which delivers this website’s typeface through Google Fonts and, if you accept analytics cookies, provides Google Analytics.
• Unsplash, which delivers the photographs shown on this website.

Cloudflare, Google and Unsplash receive your IP address and technical information when your browser loads these items. Their own privacy policies explain how they handle it.

We may also disclose information where the law requires it, or to protect our rights or the safety of others.

5. International transfers

Some of the providers above process information outside the United Kingdom and Australia, including in the United States. Where UK data protection law applies, we rely on safeguards recognised under that law for these transfers, such as adequacy regulations or approved contract terms. Where Australian privacy law applies, we take reasonable steps to make sure overseas recipients handle personal information consistently with the Australian Privacy Principles.

6. How long we keep it

• Enquiries that do not lead to an engagement: up to 24 months, then deleted. Enquiries saved through the contact form are deleted from our database automatically 24 months after they were sent.
• Enquiries that lead to an engagement: for as long as the terms of that engagement require.
• Hashed IP addresses used to limit repeated form submissions: one hour.
• Google Analytics data: for the retention period set in our Google Analytics account, which is no more than 14 months.
• Server logs: for the period set by our hosting provider.

7. Keeping it secure

We take reasonable technical and organisational steps to protect personal information from loss, misuse and unauthorised access. This website uses an encrypted connection (HTTPS), and access to enquiries is limited to the people who need it to respond. No method of sending or storing information online is completely secure, so please do not send sensitive documents through the contact form.

8. Cookies

When you first visit, we ask whether you accept analytics cookies. Nothing is set for analytics unless you accept.

• Google Analytics cookies (_ga and _ga_PN72FPB3HW), set only if you accept. They tell visits apart so we can see how the website is used, and last up to two years.
• Your choice is remembered in your browser’s local storage (pnp-analytics-consent) so we don’t ask on every page. It stays until you clear your browser data.

You can change your mind at any time using the Cookie settings link at the bottom of every page. If you withdraw consent, Google Analytics stops loading and we remove its cookies from this website.

We do not use advertising cookies. The services listed in section 4 may process technical information when your browser loads their content, as described there.

9. Your rights

In the United Kingdom

You have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that is inaccurate or incomplete
• ask us to delete your information
• ask us to restrict how we use your information
• object to our use of your information where we rely on legitimate interests
• ask us to transfer information you gave us to another organisation

Some of these rights depend on the circumstances and have exceptions.

In Australia

You can ask to access the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading.

Making a request

Email info@peoplenprocess.com with your request. We may ask you to confirm your identity before acting on it. We will respond within one month, or tell you if we need longer and why.

10. Questions and complaints

If you have a question or concern about how we handle your information, please contact us first at info@peoplenprocess.com so we can try to put it right.

You can also complain to the regulator:

• United Kingdom: the Information Commissioner’s Office (ICO), ico.org.uk/make-a-complaint
• Australia: the Office of the Australian Information Commissioner (OAIC), oaic.gov.au/privacy/privacy-complaints

11. Changes to this notice

We may update this notice when our website or the way we handle information changes. The date at the top of the page shows when it was last updated.