This Privacy Policy explains how PurpleDaffodil Consulting Limited (PDCL) (“we”, “us”, “our”) collects, uses, shares and protects your personal data when you use our website or services.
Depending on the circumstances, we may act as either a data controller or a data processor under UK data protection law. We act as a data controller where we determine the purposes and means of processing your personal data, such as when managing our business, communicating with clients and prospective clients, operating our website, or recruiting staff.
Where we process personal data solely on behalf of a client in the course of providing our professional services, we act as a data processor and process personal data only in accordance with our client's documented instructions and applicable law.
We may collect personal information such as:
Contact details (name, address, phone, email, job title)
Business information (organisation, role, enquiries, correspondence)
Financial information (where needed for billing or payments)
Recruitment details (CVs, employment history, qualifications)
Technical data (IP address, login details, browser type, cookies)
We do not routinely collect special category personal data. However, where necessary for recruitment or to comply with our legal obligations, we may process limited special category personal data, such as information about an applicant's health where reasonable adjustments are required during the recruitment process or to support employment.
Where appropriate for a particular role, we may also process information relating to criminal convictions and offences as part of pre-employment screening. We will only do so where permitted by law and where appropriate safeguards are in place.
Any health information or other special category personal data will be processed only where a condition under Article 9 UK GDPR applies. Information relating to criminal convictions and offences will be processed only where permitted under Article 10 UK GDPR and the Data Protection Act 2018. In all cases, we will apply appropriate safeguards, keep such information secure, and retain it only for as long as necessary.
We may collect data directly from you (e.g.enquiries, registration, job applications), automatically via cookies, and from third parties such as professional advisers, employers, or publicly available sources.
We process personal data on one or more of the following legal bases:
To perform a contract with you
To comply with legal obligations
With your consent (e.g. marketing)
For our legitimate interests, provided these do not override your rights
Typical uses include managing accounts, responding to enquiries, providing services, compliance checks, IT and security monitoring, recruitment, and event management.
We may share your personal data with:
Professional advisers, service providers, and contractors working on our behalf
Regulators, law enforcement or courts, where required by law
Third parties involved in a merger, acquisition, or restructuring
Other parties where you have given consent
Where data is transferred outside the UK/EEA, we use appropriate safeguards (e.g. adequacy decisions, standard contractual clauses, or transfer agreements).
We may use cookies and similar technologies to improve our website, provide security, and analyse usage. Non-essential cookies require your consent, which you can withdraw at any time. You may disable cookies through your browser, but some features may not work.
We apply appropriate technical and organisational measures to protect personal data. You are responsible for keeping passwords and login details secure.
You have rights under data protection law, including to:
Access your data
Rectify inaccurate or incomplete data
Request erasure of data
Restrict or object to processing
Request data portability (where applicable)
Withdraw consent at any time (where consent is the basis for processing)
Complain to the Information Commissioner’s Office (ICO)
We keep personal data only as long as necessary to fulfil the purposes for which it was collected, including legal and regulatory requirements. Data may be anonymised and used for research or statistics.
Our services are not directed to individuals under 16. If you believe a child has provided us with their information, please contact us.
We may update this Privacy Policy from time to time. The latest version will always be available on our website.
If you have any questions or requests regarding your personal data, please contact us via the form on this website.
