Who I am
The controller of your personal data is pembi.net consulting services Limited, a company registered in the United Kingdom (company number 14879562). I am registered with the Information Commissioner's Office. To reach me about your data, use the contact form.
What I collect, why, and for how long
| When | What I collect | Why | Lawful basis | How long |
|---|---|---|---|---|
| You use the contact form | Your name, email address, organisation (optional), phone number (optional) and message, plus your IP address for spam protection | To reply to you | Legitimate interests in answering enquiries | Two years |
| You book a free conversation | Your name, email address, what you say the conversation is for, and an optional phone number, handled by Calendly and Google Meet | To arrange and hold the conversation | Steps you ask for before entering an agreement | Two years |
| You and I work together | What you share in sessions, and my session notes | To deliver the coaching or advisory work | Performing my agreement with you | Session notes: two years, then deleted |
| I invoice you | Your name, organisation and billing details | To bill you and keep company and tax records | Performing my agreement with you, and legal obligations | Six years |
Visiting the site
The site itself sets no cookies and stores nothing in your browser. It loads fonts from Google Fonts, which means Google receives your IP address when a page loads. On the contact page, Google reCAPTCHA checks that you are a person; it uses Google's own technologies and may set its own cookies, under Google's privacy policy and terms. If you accept the cookie banner, Google Analytics also runs, to help me understand how the site is used. It sets cookies to do this, and does not run until you accept. You can withdraw or give consent at any time from the Cookie settings link in the footer. I have asked Google Analytics to anonymise IP addresses.
Who I share your data with
Only with providers who help me run the practice, acting on my instructions: my website hosting and email providers, Google (email, Meet, reCAPTCHA, Fonts and, if you accept the cookie banner, Analytics), Calendly, and my accountant or book-keeper. Each receives only the information required to perform their function. I do not sell your data and I do not use it for marketing. I will disclose it if the law requires me to. If an organisation pays for your coaching, I share nothing about your sessions unless you choose to; the terms explain this in clauses 7 and 8.
Data outside the UK
I work with clients worldwide, and some of my providers process data outside the UK. Where they do, I rely on safeguards the law recognises, such as UK adequacy regulations or standard contractual clauses.
Your rights
You can ask me to give you a copy of your data, correct it, delete it, restrict how I use it, or move it elsewhere, and you can object to my using it. These rights do not extend to the confidential content of session discussions which are never disclosed except where required by law. Use the contact form to ask. If you are unhappy with how I handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. I would be grateful for the chance to put things right first.
Security
The site uses an encrypted connection, and I keep client information in secure systems.
Changes
If I change this page, I will update the date at the top.