Website Privacy Notice – PengaNova Consulting Ltd

In this privacy notice, “we”, “our”, or “us” refers to Penganova Consulting Ltd.

We are a company registered in England and Wales.
Registered office: Kent, UK
Company number: 16959250

Introduction

This privacy notice explains how we collect, use and protect your personal data when you engage with us, whether through our website, services, or direct communication.

We are committed to protecting your privacy and handling your data transparently, responsibly and in line with UK data protection law, including the UK GDPR and Data Protection Act 2018.

In this notice, “process” means collect, store, use, share or otherwise handle your information.

Your Rights

You have rights under data protection law, including the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate data

  • Request deletion of your data (in certain circumstances)

  • Restrict or object to processing

  • Withdraw consent at any time

  • Lodge a complaint with the Information Commissioner's Office

How We Use Your Information

We process personal data under the following lawful bases:

1. Contractual necessity

When you engage us for consulting, coaching or advisory services, we process your information to:

  • Deliver services and manage engagements

  • Communicate with you

  • Manage billing and administration

  • Tailor support to your needs

2. Legitimate interests

We may process data where it supports the effective running of our business, including:

  • Improving our services and client experience

  • Maintaining records of interactions

  • Developing insights (in anonymised form)

We ensure this does not override your rights.

3. Consent

Where appropriate, we rely on your consent, for example:

  • Responding to enquiries submitted via our website

  • Sending occasional updates or insights (if you opt in)

  • Use of non-essential cookies

You can withdraw consent at any time by contacting us.

4. Legal obligations

We may process your data where required to comply with legal or regulatory obligations.

Types of Data We Collect

We may collect:

  • Name and contact details (email, phone)

  • Professional information (role, organisation)

  • Information shared during enquiries, coaching or consulting engagements

  • Website usage data (via cookies and analytics)

We only collect what is necessary and relevant.

How We Collect Your Data

We collect data when you:

  • Contact us via our website, email or phone

  • Engage us for services

  • Participate in coaching or consulting activities

  • Visit our website (via cookies and analytics tools)

Confidentiality and Coaching Engagements

We recognise the sensitive nature of coaching and advisory work.

  • All client information is treated as strictly confidential

  • Data shared within coaching engagements is not disclosed without consent, unless required by law

  • Any anonymised insights used for learning or development purposes will not identify individuals

Sharing Your Information

We do not sell or trade your personal data.

We may share information with:

  • Trusted associates or delivery partners (only where required and appropriate)

  • Professional advisers (e.g. legal, accounting)

  • Technology providers (e.g. website hosting, CRM systems)

All third parties are expected to handle your data securely and in line with data protection requirements.

International Data Transfers

Where data is processed outside the UK, we ensure appropriate safeguards are in place, such as:

  • UK-approved contractual clauses

  • Working with reputable providers with strong data protection standards

Data Retention

We retain personal data only as long as necessary:

  • Client engagement data: typically up to 6 years (for legal and business purposes)

  • Enquiries: up to 12–24 months

  • Coaching notes: retained only as long as appropriate for the engagement

We regularly review and securely delete data when no longer needed.

Cookies and Website Data

Our website uses cookies to:

  • Ensure functionality

  • Understand how visitors use the site

  • Improve user experience

You can control or disable cookies through your browser settings.

Data Security

We take appropriate measures to protect your data, including:

  • Secure systems and access controls

  • Encrypted data transmission (SSL)

  • Limiting access to authorised individuals only

Contacting Us

If you have any questions about this privacy notice or your data, please contact:

nina.cooke@penganova.com

Complaints

If you are not satisfied with how we handle your data, you can contact us directly.
You also have the right to complain to the Information Commissioner's Office.

Updates to This Policy

We may update this privacy notice from time to time.
The latest version will always be available on our website.

V1:  Developed:   December 2025
Updated: