Privacy Policy

Peterhurst Holdings Limited respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you:

• visit our website;
• submit an enquiry through our contact form;
• contact us by email, telephone or another method;
• communicate or work with us in a professional or commercial capacity; or
• discuss a business, investment, partnership or other opportunity with Peterhurst Holdings Limited or one of our Group businesses.

This policy also explains your rights under applicable data protection legislation, including the UK General Data Protection Regulation, referred to as the “UK GDPR”, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003.

Peterhurst Holdings Limited is a private holding company registered in England and Wales.

For the purposes of applicable data protection law, Peterhurst Holdings Limited is the data controller responsible for the personal information described in this policy.

References in this policy to “Peterhurst”, “we”, “us” or “our” mean Peterhurst Holdings Limited.

Our Group businesses may operate as separate data controllers and may publish their own privacy policies. When you visit a Group business’s website or engage directly with that business, its own privacy policy will normally apply.

The personal information we collect depends on how you interact with us.

Information you provide directly

We may collect:

• your name;
• your email address;
• your telephone number, where provided;
• your job title, employer or business details;
• the contents of enquiries, messages and correspondence;
• details relating to a proposed business, commercial, investment or partnership opportunity;
• information provided during meetings, telephone calls or other communications; and
• any other information you choose to provide.

When you use our website contact form, we collect:

• your name;
• your email address; and
• the information included in your message.

Please do not submit sensitive or special-category personal information through the contact form unless we have specifically requested it and there is a lawful reason for doing so.

Information collected automatically

When you visit our website, we may automatically collect certain technical and usage information through Google Analytics, cookies, server logs and similar technologies.

This may include:

• your Internet Protocol address;
• browser type and version;
• device category;
• operating system;
• approximate geographic location;
• pages viewed;
• time spent on pages;
• website interactions;
• referring website, search engine or campaign;
• dates and times of access;
• screen resolution; and
• cookie, device or analytics identifiers.

We do not intentionally send your name, email address or contact-form message content to Google Analytics.

Information obtained from other sources

We may receive personal information from:

• businesses within the Peterhurst Group;
• business partners and professional advisers;
• individuals or organisations that introduce or refer you to us;
• publicly available sources, including company websites, professional networking platforms and Companies House; and
• organisations involved in a potential business transaction or commercial opportunity.

We may use your personal information to:

• receive, review and respond to enquiries;
• communicate with you;
• understand the nature of your request;
• discuss services provided by Peterhurst or our Group businesses;
• assess business, commercial, investment or partnership opportunities;
• arrange and conduct meetings;
• develop and manage professional and commercial relationships;
• maintain appropriate business and correspondence records;
• operate, maintain and improve our website;
• understand how visitors use our website;
• assess website performance and user journeys;
• identify technical issues and improve website usability;
• protect our website, systems and business against fraud, misuse and security threats;
• establish, exercise or defend legal claims;
• comply with legal, regulatory, accounting and reporting obligations; and
• support a restructuring, acquisition, sale, investment or other corporate transaction involving Peterhurst or one of our Group businesses.

We will not use information submitted through our contact form for unrelated electronic marketing unless this is permitted by law and, where required, you have provided your consent.

We will only process personal information where we have a lawful basis to do so.

Depending on the circumstances, we may rely on the following lawful bases.

Legitimate interests

We may process your personal information where it is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and interests.

Our legitimate interests may include:

• responding to enquiries;
• communicating with business contacts;
• developing and maintaining commercial relationships;
• identifying and assessing business opportunities;
• managing and supporting our Group businesses;
• operating and securing our website;
• preventing fraud and misuse;
• maintaining appropriate business records; and
• protecting our legal and commercial interests.

Contractual necessity

We may process your personal information where it is necessary to:

• take steps at your request before entering into a contract; or
• perform or manage a contract with you or an organisation you represent.

Legal obligation

We may process personal information where necessary to comply with a legal, regulatory, accounting or reporting obligation.

Consent

We rely on your consent where required for the use of Google Analytics cookies and other non-essential website technologies.

You may withdraw your consent at any time through the cookie preference controls on our website. Withdrawing consent will not affect any processing that took place before consent was withdrawn.

Our website uses Resend to process and deliver messages submitted through our contact form.

When you submit the contact form, your name, email address, message and related technical delivery information may be transmitted to Resend so that your enquiry can be securely delivered to our email inbox.

Resend acts as a service provider and data processor on our behalf for this purpose.

We use the information submitted through the contact form to:

• deliver your message to us;
• respond to your enquiry;
• communicate with you about your request;
• maintain an appropriate record of our correspondence;
• prevent spam, fraud and misuse; and
• investigate unsuccessful or suspicious message submissions.

Our lawful basis for processing contact-form information is normally our legitimate interest in receiving and responding to business enquiries. Where your enquiry relates to a possible contract, we may also process the information to take steps at your request before entering into that contract.

Resend and its authorised subprocessors may process contact-form information outside the United Kingdom, including in the United States. Where this occurs, appropriate international-transfer safeguards are used as described in section 11 of this policy.

We use Google Analytics to understand how visitors find and use our website.

Google Analytics helps us measure information such as:

• the number of visits to our website;
• the pages visitors view;
• how long visitors spend on particular pages;
• how visitors move between pages;
• the type of device and browser used;
• the general geographic area from which the website is accessed;
• how visitors reached our website; and
• technical performance and website errors.

We use this information to produce website statistics, understand visitor journeys and improve the content, performance and usability of our website.

Google Analytics may use cookies and similar technologies to distinguish between visitors and sessions.

Where consent is required, Google Analytics will only be activated after you have accepted analytics cookies through our cookie banner or preference controls.

You can reject analytics cookies without losing access to the main content and functionality of our website. You can also change or withdraw your choice at any time through the cookie settings available on the website.

We do not use Google Analytics information to directly identify visitors. We also do not intentionally use Google Analytics to collect names, email addresses or the contents of contact-form messages.

We do not use Google Analytics for personalised advertising or remarketing unless we update this policy, update our cookie information and obtain any consent required by law.

Google may process analytics information on servers outside the United Kingdom. Where international transfers occur, Google uses applicable legal transfer mechanisms and safeguards.

Cookies are small files or pieces of information stored on or accessed from your device when you visit a website.

Our website may use the following categories of cookies and similar technologies.

Strictly necessary technologies

These technologies are required to:

• operate the website;
• maintain website security;
• prevent fraud or misuse;
• enable the contact form to function; and
• remember your cookie preferences.

Strictly necessary technologies do not normally require consent.

Analytics technologies

With your permission, we use Google Analytics technologies to understand website usage and improve our website.

Analytics technologies are not essential for the website to function. Where consent is required, they will remain disabled unless and until you accept them.

You can accept, reject or manage analytics technologies through the cookie banner or cookie settings on our website.

Your browser may also allow you to block or delete cookies. Blocking certain strictly necessary technologies may affect the operation of parts of the website.

We may share personal information with:

• businesses within the Peterhurst Group where necessary to respond to your enquiry or pursue a relevant opportunity;
• Resend, which processes and delivers contact-form messages;
• Google, which provides Google Analytics;
• website hosting, cloud infrastructure and IT service providers;
• website developers and technical-support providers;
• email and business communication providers;
• accountants, auditors, insurers, solicitors and other professional advisers;
• banks, financial institutions and payment providers, where relevant;
• law-enforcement agencies, regulators, courts and public authorities where required by law;
• prospective purchasers, investors, lenders or professional advisers in connection with a corporate transaction; and
• other parties where you have instructed or authorised us to share the information.

Our service providers are only permitted to process personal information for agreed purposes and must protect it in accordance with their contractual and legal obligations.

We do not sell your personal information.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Our normal retention periods include:

• General and contact-form enquiries: normally for up to 24 months following the last meaningful communication;
• Business and commercial relationships: for the duration of the relationship and normally for up to six years afterwards;
• Contractual, financial and transaction records: normally for up to six years following the end of the relevant financial year or relationship;
• Google Analytics user-level and event data: normally for no longer than 14 months, subject to our configured Analytics retention settings;
• Website security and technical records: for a period reasonably necessary to investigate incidents and maintain website security;
• Cookie consent records: for as long as reasonably necessary to record and demonstrate your preferences; and
• Legal disputes: for as long as reasonably necessary to establish, exercise or defend legal claims.

Resend may retain message-delivery information for the period required to provide its services, maintain security, investigate delivery issues and comply with applicable legal obligations.

We may retain information for longer where required by law, regulation, insurance requirements or an ongoing legal matter.

When personal information is no longer required, we will securely delete or anonymise it.

Some of our service providers, including Resend and Google, may process or store personal information outside the United Kingdom.

Resend’s primary processing operations take place in the United States. Google operates servers and processing facilities in multiple countries.

Where personal information is transferred outside the United Kingdom, we will take appropriate steps to ensure it receives an adequate level of protection.

These safeguards may include:

• transferring information to a country covered by UK adequacy regulations;
• relying on the UK Extension to the EU-US Data Privacy Framework where applicable;
• using the UK International Data Transfer Agreement;
• using the UK Addendum to the European Commission’s Standard Contractual Clauses; or
• relying on another lawful transfer mechanism permitted under UK data protection legislation.

You may contact us for further information about the safeguards relevant to your personal information.

We use appropriate technical and organisational measures designed to protect personal information against:

• unauthorised access;
• accidental or unlawful disclosure;
• alteration;
• loss;
• destruction; and
• misuse.

These measures may include:

• access controls;
• secure website hosting;
• encrypted connections;
• password protection;
• software updates;
• backups;
• supplier due diligence; and
• restrictions on who can access personal information.

Although we take reasonable steps to protect personal information, no internet transmission or electronic-storage system can be guaranteed to be completely secure.

Depending on the circumstances and the lawful basis used, you may have the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your personal information;
• request restriction of the way we process your information;
• object to processing based on our legitimate interests;
• object to direct marketing at any time;
• request data portability where applicable;
• withdraw consent where we rely on your consent; and
• raise a complaint about how your personal information has been handled.

These rights are not absolute and may be subject to legal limitations or exemptions.

To exercise your rights, contact us at mark@peterhurst.co.uk.

We may need to request information to confirm your identity before responding to your request.

We will normally respond within one month. We may take longer where a request is particularly complex or where you have made multiple requests. We will inform you if an extension is required.

We would appreciate the opportunity to address your concerns directly.

Please contact us in the first instance at: mark@peterhurst.co.uk

You also have the right to make a complaint to the Information Commissioner’s Office, the United Kingdom’s independent data-protection regulator.

We do not use personal information collected through this website to make decisions based solely on automated processing where those decisions have legal or similarly significant effects on individuals.

We will update this policy before introducing this type of processing.

Our website and services are intended for businesses and adult users. They are not directed towards children.

We do not knowingly collect personal information from children through our website.

If you believe that a child has provided personal information to us, please contact us so that we can investigate and, where appropriate, delete it.

Our website contains links to websites operated by our Group businesses and other third parties.

We are not responsible for the privacy practices, security or content of third-party websites.

When you follow a link to another website, you should read that website’s privacy policy before providing personal information.

We may update this Privacy Policy from time to time to reflect:

• changes to our website or business activities;
• changes to the ways we process personal information;
• changes to our service providers; or
• legal and regulatory developments.

The latest version will be published on our website and the “Last updated” date will be amended accordingly.

For questions about this Privacy Policy, how we use personal information or your data-protection rights, contact: