1. Who we are (data controller)
For the purposes of the UK GDPR and the Data Protection Act 2018, the data controller is:
If you have questions about this Policy, or you want to exercise your rights, contact us using the privacy email above.
We may ask for limited information to verify your identity before responding.
2. What personal data we collect
We collect personal data that you provide directly, data generated through your use of the website, and technical data
collected automatically by our servers and tools. We aim to collect only what is reasonably necessary for the purposes described below.
| Category |
Examples |
| Identity and contact data |
Full name, work email address, phone number (if provided), company or organisation name (if provided in your message). |
| Inquiry content |
Message text you submit via forms or email, including the topic you select and any details you include about your inquiry. |
| Technical data |
IP address, browser type and version, device type, operating system, language settings, referring page, and timestamp of requests. |
| Usage data |
Pages viewed, time on page, clicks, scroll events, and general navigation patterns (where analytics is enabled and accepted). |
| Cookie data |
Identifiers stored in cookies or local storage that remember your cookie choices and support analytics/marketing where enabled. |
Please avoid submitting confidential information (such as sensitive contract terms, personal identifiers of third parties, or sensitive business data) through web forms.
If a secure channel is needed, request it first by email.
3. How we collect data
We collect information using the methods below. Some methods are necessary to operate the website, while others depend on your choices in the cookie banner.
- Web forms: when you submit an inquiry through the contact form, we receive the details you enter.
- Email and phone communications: if you contact us directly, we receive the information you provide and metadata associated with the message (such as timestamps).
- Server logs: our hosting infrastructure automatically logs requests to maintain security, detect errors, and prevent abuse.
- Cookies and similar technologies: we use cookies and local storage for essential preferences and, where accepted, analytics and marketing measurement.
- Analytics tools: where enabled, we use Google Analytics 4 to understand website usage in aggregate.
- Marketing measurement: where enabled, we may use Meta Pixel to measure the effectiveness of ads and understand aggregate interactions.
4. Legal bases for processing (UK GDPR Article 6)
We process personal data only when we have a valid legal basis. The legal basis depends on why the data is used.
The table below explains the typical legal bases we rely on.
| Processing activity |
Legal basis |
| Responding to inquiries and providing requested information |
Contract (Article 6(1)(b)) when steps are taken at your request prior to entering an engagement; otherwise legitimate interests (Article 6(1)(f)). |
| Operating and securing the website (server logs, security monitoring) |
Legitimate interests (Article 6(1)(f)) to maintain availability, prevent fraud, and protect our systems. |
| Analytics (Google Analytics 4) where enabled via the cookie banner |
Consent (Article 6(1)(a)). You can withdraw consent at any time using the cookie settings on this site. |
| Marketing measurement (Meta Pixel) where enabled via the cookie banner |
Consent (Article 6(1)(a)). |
| Compliance with legal obligations (record keeping, responding to lawful requests) |
Legal obligation (Article 6(1)(c)) where applicable. |
Where we rely on legitimate interests, we consider and balance our interests against your rights and expectations.
You can object to processing based on legitimate interests, and we will assess the request as described in Section 10.
5. Purposes of processing
We use personal data for the purposes below. We do not use your inquiry content to make automated decisions that produce legal or similarly significant effects.
- Service delivery and pre-engagement communication: to understand your inquiry, schedule discussions, and provide advisory information you request.
- Customer support: to respond to questions and maintain a record of communications for continuity.
- Site operations: to run, maintain, and troubleshoot the website, including monitoring performance and preventing abuse.
- Analytics: to understand which pages are used, improve usability, and maintain content relevance, where you consent.
- Marketing measurement: to evaluate ad performance and understand aggregate interactions, where you consent.
- Legal and compliance: to comply with applicable law and to enforce our terms and policies where necessary.
6. Data retention
We keep personal data only for as long as necessary for the purposes described above. Retention periods may vary depending on the nature of the inquiry,
our legal obligations, and the need to maintain records for legitimate business purposes. Typical retention periods are listed below.
| Data type |
Typical retention |
| Contact form submissions |
Up to 2 years from the last interaction, unless a longer period is required for ongoing discussions or legal obligations. |
| Email correspondence |
Up to 2 years from the last interaction, unless extended for operational continuity or legal compliance. |
| Analytics data (GA4) where enabled |
14 months in accordance with our standard analytics configuration and reporting needs. |
| Server logs |
Typically 90 days for security and troubleshooting, unless we need to retain logs longer to investigate incidents. |
| Cookie consent records (stored locally) |
Stored in your browser until you clear site data or you change your cookie preferences. |
When retention periods expire, we delete or anonymise data in line with reasonable operational practices.
7. Sharing and processors
We do not sell personal data. We share personal data only as needed to operate the website, deliver communications, and comply with law.
When we use vendors, they act as processors under contract and are required to protect the data.
- Hosting and infrastructure providers: to host the website and store logs required for security and reliability.
- Email service providers: to send and receive email communications and maintain basic email security.
- Analytics provider: Google Analytics 4 (Google Ireland Limited) where you consent to analytics cookies.
- Marketing measurement provider: Meta Platforms Ireland Limited where you consent to marketing cookies and measurement.
- Professional advisers: accountants, auditors, or legal advisers where needed for compliance or legitimate interests.
- Authorities: law enforcement or regulators where required by applicable law.
The specific vendors used may change over time. If we make material changes that affect your rights, we will update this Policy as described in Section 13.
8. International transfers
We are based in the United Kingdom. Some service providers may process personal data outside the UK, including in the United States or other jurisdictions.
Where personal data is transferred internationally, we implement safeguards such as:
- UK International Data Transfer Agreement (IDTA) or UK Addendum to EU Standard Contractual Clauses where applicable.
- Transfers to countries with an adequacy decision recognised by the UK where relevant.
- Additional measures such as access controls and encryption in transit where appropriate.
You may contact us at [email protected] to request information about the safeguards applicable to particular transfers.
9. Security
We implement reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure.
Measures may include access controls, least-privilege practices, secure configuration, and monitoring for misuse.
No website or transmission is completely secure. If you believe your interaction with us is no longer secure, contact us promptly using the privacy email.
10. Your rights (UK GDPR)
Depending on your location and applicable law, you may have the following rights regarding your personal data:
- Right of access: request confirmation of whether we process your data and obtain a copy.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion in certain circumstances.
- Right to restriction: request that processing is limited in certain cases.
- Right to data portability: request a copy in a structured, commonly used format where processing is based on consent or contract and carried out by automated means.
- Right to object: object to processing based on legitimate interests; you may also object to direct marketing.
- Right to withdraw consent: where we rely on consent, you may withdraw it at any time without affecting prior processing.
To exercise your rights, email [email protected]. Please include enough information for us to identify your records.
We will respond within the timeframes required by law. If we cannot fulfil a request, we will explain why.
Right to complain: If you are in the UK and you have concerns about our processing, you may complain to the Information Commissioner’s Office (ICO):
https://ico.org.uk/.
11. Cookies and similar technologies
Cookies are small text files placed on your device. We also use local storage to remember your cookie preference.
You can manage cookies through our cookie banner and through your browser settings.
Cookie categories
- Strictly necessary: required to remember your cookie choices and support core site functionality.
- Analytics: help us understand aggregate usage (for example, which pages are visited). Enabled only with consent.
- Marketing: help measure advertising and understand aggregate interactions. Enabled only with consent.
Typical durations
- Strictly necessary: up to 12 months (cookie preference stored locally unless cleared).
- Analytics: up to 14 months (depending on provider configuration).
- Marketing: durations vary by provider and configuration, typically up to 90 days or longer depending on settings.
You can withdraw consent at any time by changing your cookie preferences. If you reject cookies, essential functions still work,
but analytics and marketing measurement will not be enabled.
12. Children’s privacy
Our website and services are not directed to children under 16. We do not knowingly collect personal data from children under 16.
If you believe a child has provided personal data to us, contact [email protected] and we will take appropriate steps to delete it.
13. Policy updates
We may update this Privacy Policy to reflect changes to our practices, technology, or legal requirements. When we make changes, we will revise the
“Last Updated” date at the top of this page. If changes are material, we may also provide a notice on the website.
Last Updated: January 15, 2026
14. Contact and Data Protection contact point
To ask questions, request a copy of your data, or exercise your rights, contact:
Pizankaten provides advisory services related to negotiation preparation and communication strategy. Outcomes vary depending on individual circumstances and external factors.