Privacy Policy

1. Who We Are

Prestige Commercial Consulting Limited ("we", "us", "our") is a company registered in England and Wales (Company No. 17059746) with its registered office at 124-128 City Road, London, EC1V 2NX.

We are the data controller for the personal information we collect through this website and in the course of our business activities. If you have any questions about how we handle your personal data, you can contact us at requests@prestigecommercialconsulting.co.uk.

We are registered with the Information Commissioner's Office. Registration reference: ZC106918. Date registered: 17 March 2026. Registration expires: 16 March 2027. You can view our Data Protection Registration Certificate here.

2. What Information We Collect

We may collect the following personal information:

Information you provide directly

• Your name, email address, organisation name, and any other contact details you choose to provide when you complete our contact form or correspond with us
• Details of your enquiry or the services you are interested in
• Any other information you choose to share with us in the course of our communications
• Your email address when you sign up to receive updates from us
• Billing and order information if you purchase a paid digital product or enquiry-led resource from us. Card details are processed by our payment provider; PCC does not store card details
• Purchase fulfilment information for the live paid digital tool, such as product entitlement records, checkout references, customer email address, and secure download event records where needed to provide access and support
• Learning access information where you use or enquire about the separate PCC Learning Platform

Information collected automatically

We do not currently use advertising cookies or client-side analytics scripts on this website. Our hosting provider, Netlify, may generate limited server-side request logs and aggregated usage information for security, performance monitoring, and site administration. If we introduce additional analytics or cookies in future, this policy will be updated accordingly.

Browser storage

Our free procurement tools use your browser's local storage to save tool states on your device. This data is not transmitted to us and remains solely on your device.

3. How We Use Your Information

We use the personal information you provide for the following purposes:

• To respond to your enquiry and communicate with you about our services
• To provide the consultancy services you have engaged us to deliver
• To manage our contractual relationship with you or your organisation
• To comply with our legal and regulatory obligations
• To send you updates where you have consented (mailing list)
• To provide access to free reference tools on the Procurement Support Hub
• To process payments, record paid digital tool purchases or enquiry-led resource orders, fulfil secure downloads, and support access issues
• To manage enquiries about, or access to, the separate PCC Learning Platform

We will only send marketing communications where you have expressly opted in. You can unsubscribe at any time.

4. Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases for processing your personal data:

• Legitimate interests: Where you submit a contact form enquiry, we process your information on the basis of our legitimate interests in responding to and managing business enquiries. Any subsequent marketing communications rely on separately obtained consent
• Contractual necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
• Legitimate interests: Where processing is necessary for our legitimate business interests, such as maintaining records of our professional engagements, provided these interests do not override your rights
• Legal obligation: Where processing is necessary to comply with a legal obligation to which we are subject

5. Who We Share Your Information With

We do not sell, rent, or trade your personal information to third parties. We may share your information with:

• Our professional advisors (such as accountants or legal advisors) where necessary for the operation of our business
• Regulatory bodies or law enforcement agencies where we are required to do so by law
• Netlify, Inc. - this website is hosted on Netlify. Contact form submissions are processed by Netlify as our data processor. See netlify.com/privacy
• Email marketing platforms - where you have consented to marketing emails, your address may be stored with a third-party email provider. The provider name and privacy information should be made clear at sign-up or in the first email communication from us
• Payment processors - where you purchase paid products or agree card payment for an enquiry-led resource, payments are processed by Stripe, Inc. We do not store card details. See stripe.com/privacy
• Supabase - where needed to record live paid digital tool purchases, product entitlements, webhook events, and secure download activity for fulfilment and support
• PCC Learning Platform providers - where you access learning services through the separate learning platform, relevant access and learner information may be handled through that platform and its supporting providers. Provider-specific privacy information should be provided through the learning platform access route

We will not share your personal information with any other third parties without your prior consent unless required to do so by law.

6. How We Store and Protect Your Information

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. Personal information collected through our contact form, paid digital tools checkout, secure download flow, or learning access routes is handled in accordance with our data retention practices.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form enquiries are retained for a maximum of 24 months from the date of your last communication with us, unless a longer retention period is required for contractual or legal purposes. Purchase, entitlement, payment reference, and download support records may be retained for as long as needed for accounting, tax, contractual, access support, fraud prevention, and legal record-keeping purposes.

7. Your Rights

Under UK data protection law, you have the following rights in relation to your personal information:

• Right of access: You can request a copy of the personal information we hold about you
• Right to rectification: You can ask us to correct any inaccurate or incomplete information
• Right to erasure: You can ask us to delete your personal information in certain circumstances
• Right to restrict processing: You can ask us to limit how we use your information
• Right to data portability: You can request that we transfer your information to another organisation in a structured, commonly used format
• Right to object: You can object to certain types of processing, including processing based on legitimate interests
• Right to withdraw consent: Where we rely on your consent to process your data, you can withdraw that consent at any time

To exercise any of these rights, please contact us at requests@prestigecommercialconsulting.co.uk. We will respond to your request within one month.

8. Complaints

If you are unhappy with how we have handled your personal information, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). You can contact the ICO at ico.org.uk or by calling 0303 123 1113. Our registration reference is ZC106918.

We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us in the first instance.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.