Website Privacy Notice – PengaNova Consulting Ltd
In this privacy notice, “we”, “our”, or “us” refers to Penganova Consulting Ltd.
We are a company registered in England and Wales.
Registered office: Kent, UK
Company number: 16959250
Introduction
This privacy notice explains how we collect, use and protect your personal data when you engage with us, whether through our website, services, or direct communication.
We are committed to protecting your privacy and handling your data transparently, responsibly and in line with UK data protection law, including the UK GDPR and Data Protection Act 2018.
In this notice, “process” means collect, store, use, share or otherwise handle your information.
Your Rights
You have rights under data protection law, including the right to:
Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (in certain circumstances)
Restrict or object to processing
Withdraw consent at any time
Lodge a complaint with the Information Commissioner's Office
How We Use Your Information
We process personal data under the following lawful bases:
1. Contractual necessity
When you engage us for consulting, coaching or advisory services, we process your information to:
Deliver services and manage engagements
Communicate with you
Manage billing and administration
Tailor support to your needs
2. Legitimate interests
We may process data where it supports the effective running of our business, including:
Improving our services and client experience
Maintaining records of interactions
Developing insights (in anonymised form)
We ensure this does not override your rights.
3. Consent
Where appropriate, we rely on your consent, for example:
Responding to enquiries submitted via our website
Sending occasional updates or insights (if you opt in)
Use of non-essential cookies
You can withdraw consent at any time by contacting us.
4. Legal obligations
We may process your data where required to comply with legal or regulatory obligations.
Types of Data We Collect
We may collect:
Name and contact details (email, phone)
Professional information (role, organisation)
Information shared during enquiries, coaching or consulting engagements
Website usage data (via cookies and analytics)
We only collect what is necessary and relevant.
How We Collect Your Data
We collect data when you:
Contact us via our website, email or phone
Engage us for services
Participate in coaching or consulting activities
Visit our website (via cookies and analytics tools)
Confidentiality and Coaching Engagements
We recognise the sensitive nature of coaching and advisory work.
All client information is treated as strictly confidential
Data shared within coaching engagements is not disclosed without consent, unless required by law
Any anonymised insights used for learning or development purposes will not identify individuals
Sharing Your Information
We do not sell or trade your personal data.
We may share information with:
Trusted associates or delivery partners (only where required and appropriate)
Professional advisers (e.g. legal, accounting)
Technology providers (e.g. website hosting, CRM systems)
All third parties are expected to handle your data securely and in line with data protection requirements.
International Data Transfers
Where data is processed outside the UK, we ensure appropriate safeguards are in place, such as:
UK-approved contractual clauses
Working with reputable providers with strong data protection standards
Data Retention
We retain personal data only as long as necessary:
Client engagement data: typically up to 6 years (for legal and business purposes)
Enquiries: up to 12–24 months
Coaching notes: retained only as long as appropriate for the engagement
We regularly review and securely delete data when no longer needed.
Cookies and Website Data
Our website uses cookies to:
Ensure functionality
Understand how visitors use the site
Improve user experience
You can control or disable cookies through your browser settings.
Data Security
We take appropriate measures to protect your data, including:
Secure systems and access controls
Encrypted data transmission (SSL)
Limiting access to authorised individuals only
Contacting Us
If you have any questions about this privacy notice or your data, please contact:
Complaints
If you are not satisfied with how we handle your data, you can contact us directly.
You also have the right to complain to the Information Commissioner's Office.
Updates to This Policy
We may update this privacy notice from time to time.
The latest version will always be available on our website.
V1: Developed: December 2025
Updated:

