Privacy Policy

Last Updated: 6 April 2026

Penn Advisory operates this website. This page informs you of our policies regarding the collection, use, and disclosure of Personal Information we receive from users of this site and from our clients.

We are committed to protecting your privacy and handling your data in an open and transparent manner. Penn Advisory acts as a Data Controller under the UK/EU General Data Protection Regulation (GDPR).

1. Information We Collect

We only collect personal data that is necessary for business, contractual, or website management purposes. This may include:

Contact Data: Name, job title, company name, email address, phone number, and postal address.
Professional Information: Details about your business, career history, or projects.
Financial Data: Bank account details or VAT numbers necessary for invoicing and payments.
Technical Data: IP address, browser type, and information collected via cookies (see Section 6).

2. How We Collect Your Data

Directly from you: When you contact use, sign up for a newsletter, fill out a contact form, or engage our services.
Publicly available sources: LinkedIn or your company website.
Automatically: Through cookies and tracking technologies when visiting our website.

3. Purpose and Legal Basis for Processing

We process your data based on the following legal grounds:

Contractual Necessity: To provide consulting services, communicate about projects, and manage invoicing.
Legitimate Interests: To promote our services, respond to inquiries, improve my website, and ensure network security.
Consent: If you opt-in to marketing communications, which you may withdraw at any time.

4. Data Sharing

We do not sell your personal data. We may share your information only with:

Service Providers: Third-party vendors who assist with IT, email marketing (e.g., Mailchimp), accounting (e.g., Xero), or website hosting.
Legal/Regulatory Authorities: If required by law, such as HMRC in the UK.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, client records are kept for 7 years for tax purposes.

6. Website Cookies

Our website uses "cookies" to collect information to improve your experience. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

7. Your Rights

Under data protection law, you have the following rights:

Access: To request a copy of the data we hold about you.
Correction: To ask us to correct inaccurate data.
Erasure: To request the deletion of your data (subject to legal retention requirements).
Object/Restrict Processing: To object to the processing of your data.
Withdraw Consent: To withdraw consent at any time (for marketing).

To exercise these rights, please contact us.

8. Security

We take reasonable steps to protect your personal information, using secure, encrypted, and password-protected systems.

9. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

10. Contact Information

If you have any questions about this Privacy Notice, please contact: David Tidd at

david.tidd@pennadvisory.uk