P2 Consulting understand that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits this website, www.p2consulting.com (“Our Site”). We collect personal data via the Cookies on Our Site, when you contact us directly, or when you have given us your consent. Any personal data we do collect will only be used as permitted by applicable data protection legislation.

Please read this Privacy Policy carefully and ensure that you understand it. Your acceptance of Our Privacy Policy is deemed to occur upon your first use of Our Site. If you do not accept and agree with this Privacy Policy, you must stop using Our Site immediately.

This Privacy Notice explains in detail the types of personal data we may collect from you when you make contact with us. It also explains how we’ll store and handle that data and keep it safe.

P2 Consulting may change this policy from time to time by updating this page. You should check this page occasionally to ensure that you are happy with any changes. This policy is effective from 25 May 2018. This policy is subject to any additional terms of disclaimers or other contractual terms you have entered into with P2 Consulting such as client privacy statements or notices, and any applicable mandatory laws and regulations.

GDPR stands for General Data Protection Regulation. It’s the biggest change to UK data privacy law for 20 years and creates a single set of rules that better protects personal information for people across the EU. P2 Consulting have reviewed how we manage the personal data we collect or process, such as customer addresses and staff details, to ensure we meet GDPR requirements.

We know that there’s a lot of information here, but we want you to be fully informed about your rights, and how P2 Consulting and our subsidiary entities use your data. We hope the following sections will answer any questions you have but if not, please do get in touch with us by contacting our Data Privacy Team.

For any queries relating to the contents of these Data Privacy pages, if you have any questions, or want more details about how we use your personal information, please use our secure online Subject Access Request Form below, which gets delivered directly to our Data Privacy Lead. Our dedicated team will endeavour to get back to you as soon as possible.

You can also email our Data Privacy Lead directly by emailing: DPO@p2consulting.com or by post: Att Data Privacy Lead, Data Privacy Office, P2 Consulting, 10 Eastcheap, London, EC3M 1AJ, UK.

P2 Consulting are a part of the P2 TopCo Limited Group. The P2 TopCo Group is made up of several different legal entities:

1. P2 Consulting (P2CG Limited) – that’s us.
2. Certeco Ltd (Certeco HoldCo Limited) – a subsidiary organisation delivering Testing and Assurance Business Transformation services
3. FS101 Limited – a subsidiary organisation delivering regulatory compliance services.

This privacy notice is issued on behalf of the P2 TopCo Group so when we mention “P2 Consulting”, “we”, “us” or “our” in this privacy notice, we are referring to the relevant company in the P2 TopCo Group responsible for processing your data. Ordinarily, the relevant company in the P2 TopCo Limited Group who you are engaged with will be the controller of the personal information that you provide to us. For further information in respect of who the data controller is in respect of any personal data you provide to us, please contact us under the details above.

Data Protection law says that we are allowed to use personal information only if we have a proper reason to do so. This includes sharing it outside of the P2 TopCo Group. The law on data protection sets out a number of different reasons for which a company may collect and process your personal data, including:

1. Contractual obligations: In certain circumstances, we need your personal data to comply with our contractual obligations with you.
2. Legal duty: In rare cases, we are required by law to provide your details. If this happens we will let you know in advance.
3. Legitimate interest: In some instances, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests.
4. Consent: In specific situations, we can collect and process your data with your consent.

We may collect certain personal information about you (or your business) from other companies within the P2 TopCo Group and from the following sources:

Data you give to us:

• When you engage with us on social media
• When you contact us by any means with queries, complaints etc.
• When you ask one of our Partners (or suppliers) to email you information about a service
• When you book any kind of appointment with us or attend an event
• When you choose to complete any surveys we send you that you’ve opted-in to receive
• When you comment on or review our services
• When you fill in any forms on this website
• When you’ve given a third-party permission to share with us the information they hold about you

We collect data from publicly available sources when you have given your consent to share information or where the information is made public as a matter of law (e.g. Companies House).

Data from third parties we work with:

• Social networks
• Market researchers
• Organisations that introduce you to us
• Networking events
• Companies you ask to share your data with us

Who we share your personal information with:

We may share your personal information with companies within the P2 TopCo Group and these organisations:

• HM Revenue & Customs, regulators and other authorities
• Any party linked with you or your business’s product or service
• Companies we have a joint venture or agreement to co-operate with
• Organisations that introduce you to us
• Companies that we introduce you to
• Companies you ask us to share your data with

We want to give you the best possible user experience. If you contact us or use our services we have a legitimate or contractual basis to use your personal information.

Under a legitimate interest data privacy law allows this as part of us being able to understand our customers and provide the highest levels of service.

Here are some of the ways we may use your personal data:

• For making services available or providing services to you
• Where we need to perform under a contract we have entered into with you
• For on-going administrative purposes
• Where we need to comply with a legal obligation
• For being able to contact individuals about business partners’ promotions
• Where you’ve provided us with consent to contact you directly about events

Of course, if you wish to change how we use your data, you’ll find details in the ‘Your rights over your personal data’ section below.

Remember, if you choose not to share your personal data with us, or refuse certain contact permissions, we might not be able to provide some services you’ve asked for.

Data security is very important to us, and to protect your data we have taken suitable measures to safeguard and secure any data we hold about you (even if it is only your email address).

Your data will only be stored within the European Economic Area (“the EEA”) (the EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein).

We will keep your personal information for as long as you are a customer or supplier of the P2 TopCo Group. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal and regulatory requirements

At the end of that retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning. For more details on our data retention periods please contact our Data Privacy Office: DPO@p2consulting.com

We may keep your data for longer than 7 years if we cannot delete it for legal, regulatory or technical reasons. We may also keep it for research or statistical purposes. If we do, we will make sure that your privacy is protected and only use it for those purposes.

In any of the situations below, if you are looking to have us provide, correct or erase your personal information please contact our Data Privacy Team via the below secure online Subject Access Rights Form, which gets delivered directly to our Data Privacy Lead.

Below is an overview of your different rights.

You have the right to request:

• Access to the personal data we hold about you, free of charge in most instances
• The correction of your personal data when incorrect, out of date or incomplete
• That we stop using your personal data for direct marketing (either through specific channels, or all channels)
• That we stop any consent-based processing of your personal data after you withdraw that consent

How to get a copy of your personal information that we may hold

You have the right to request a copy of any information about you that P2 Consulting holds at any time. You also have the right, in certain circumstances, to request the transfer of your personal data to you or to a third party.

If we choose not to action your request we will explain to you the reasons for our refusal.

Amending your personal information when it is inaccurate

You have the right to request that any information about you that P2 Consulting holds at any time that is inaccurate is corrected.

Checking your identity

In order for us to protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Notice.

Letting us know if you want us to stop using your personal information

You have the right to object to our use of your personal information, or to ask us to delete, remove, or stop using your personal information if there is no need for us to keep it. This is known as the ‘right to object’ and ‘right to erasure’, or the ‘right to be forgotten’. You also have the right to restrict our further processing of your personal data.

There may be legal or other official reasons why we need to keep or use your data. However, please tell us if you think that we should not be using it.

Your right to withdraw consent

You can withdraw your consent at any time. Please contact us if you want to do so. Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent.

How to complain

Please let us know if you are unhappy with how we have used your personal information. You can contact us using our secure online Subject Access Rights Form below, which gets delivered directly to our Data Privacy Lead.

You also have the right to complain to the Information Commissioner’s Office. Find out on their website how to report a concern.

The personal information we have for you is made up of what you have given to us, and data we collect when you use our services, make an enquiry, or from third parties we work with.

We study this to form a view on what we think you may want or need, or what may be of interest to you.

We will only use your personal information to send you marketing messages if it is lawful for us to do so.

You can ask us to stop sending you marketing messages by contacting us at DPO@p2consulting.com

To find out more about how we use cookies please see our cookie notice.