Privacy Policy

Who we are

[PLACEHOLDER: draft adapted from another project, awaiting review by the client and a qualified adviser]

The Provision Pathway Ltd (company number 17411072) is the data controller for the personal information collected through this website. Our registered address is Flat 5, Railway Cuttings, Kenilworth, CV8 1LQ. Our data protection contact is Zara Azad, who you can reach at info@theprovisionpathway.co.uk.

We are not required to register with the Information Commissioner’s Office (ICO). We confirmed this using the ICO’s registration self-assessment.

This policy explains what personal data we collect through this website, why we collect it, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

What data we collect

• When you send an enquiry through our contact form: your name, email address, telephone number if you give one, how you would like us to contact you, your message, and your agreement to us handling your enquiry.
• When you book a consultation through Calendly: the details you enter in Calendly’s booking form, such as your name and email address.
• When you email us directly: your email address and anything you include in your message.
• With your consent only: information about how you use the website, collected by Google Analytics, such as the pages you view, how you arrived, and the type of device and browser you use.
• When you visit the website: technical information such as your IP address, which our hosting provider processes in order to deliver the website to you.

Information about young people

Enquiries often concern a child or young person. A message may include information about their needs, health or education. Information about health is special category data under UK GDPR and needs extra protection. Please share only what we need to reply to your first enquiry; more detail can follow once we are in touch.

[PLACEHOLDER: condition for processing special category data, to be confirmed]

Why we use your data, and our legal basis

• To reply to your enquiry in the way you prefer. Legal basis: consent, which you give with the checkbox on the contact form.
• To arrange and hold a consultation you have booked. Legal basis: taking steps at your request before entering into a contract.
• To understand how the website is used and improve it. Legal basis: consent, which you give by accepting cookies.
• To deliver the website and keep it secure. Legal basis: legitimate interests.

Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect anything we did with your data before you withdrew it.

How contact form enquiries are handled

When you submit the contact form, your enquiry is sent to us by email. We do not store submissions in a database or anywhere on the website. The email in our inbox is the only record.

Who we share data with

We use the following services to run this website. Each receives only what it needs to do its job.

• Vercel hosts the website. It processes technical information such as IP addresses to deliver pages, and passes contact form submissions on to be emailed to us without storing them.
• Resend sends contact form submissions to our inbox. It receives the contents of your enquiry.
• Calendly handles consultation bookings. It receives the details you enter when you book. If you have accepted cookies, it also sets cookies when the booking window opens on this website.
• Google Analytics 4 measures how the website is used. It receives usage and device information, and only if you have accepted cookies.

These providers may process data outside the UK. [PLACEHOLDER: safeguards for international transfers, to be confirmed]

We do not sell your personal data to anyone.

How long we keep your data

• Enquiry emails, from the contact form or sent to us directly: kept only as long as necessary, in line with standard practice, and never longer than seven years.
• Consultation booking records: kept only as long as necessary, in line with standard practice, and never longer than seven years.
• Website analytics data: 14 months, the data retention setting in our Google Analytics property.
• Your cookie choice: stored in your own browser until you clear it, or until we ask again after changing our cookies policy.

Your rights

Under UK GDPR you have the following rights:

• Right of access: you can ask for a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct inaccurate data.
• Right to erasure: you can ask us to delete your data in certain circumstances.
• Right to restrict processing: you can ask us to limit how we use your data.
• Right to data portability: you can ask for your data in a structured, machine readable format.
• Right to object: you can object to processing based on legitimate interests.
• Right to withdraw consent: where we rely on consent, you can withdraw it at any time.
• Rights about automated decision making: we do not make automated decisions about you or profile you.

To exercise any of these rights, contact Zara Azad, our data protection contact, at info@theprovisionpathway.co.uk. We will respond within one month. If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

This website uses cookies only with your consent. See our Cookies policy for full details and how to change your choice.

Changes to this policy

We may update this policy from time to time. The current version will always be on this page, with the date it was last updated.