Privacy notice

Who we are

Protego Sol Limited is the controller of personal data described in this notice. Our registered office is 25b Cleveland Square, London, W2 6DD. Contact hi@protegosol.com for privacy questions.

Information we collect

We collect information you provide through the contact form, by email, by telephone, during an engagement, or when requesting a resource. This may include your name, organisation, job details, contact details, enquiry, correspondence, preferences and records needed to manage a client or supplier relationship.

Our website and hosting providers may process technical information such as IP address, browser, device, requested pages, timestamps and security logs. We do not intentionally collect special category data through the website. Please do not submit it in an enquiry unless necessary and agreed with us.

How and why we use it

• +To answer enquiries and take steps requested before entering a contract.
• +To deliver, administer and document contracts with clients and suppliers.
• +To send requested resources and related professional updates where we have consent or a legitimate interest, subject to your right to object.
• +To secure our systems, investigate misuse, maintain records and establish or defend legal claims.
• +To meet legal, regulatory, insurance, tax and professional obligations.

Lawful bases

We rely on contract and steps taken at your request before contract, legitimate interests in operating and securing our business and communicating with professional contacts, consent where required for email marketing, and legal obligation. Where we rely on legitimate interests, we consider the impact on your rights and use the information only where those interests are not overridden.

Email list

If you request an Insights resource or subscribe to updates, we use your email address to deliver it and send related professional material. You can unsubscribe using the link in an email or by contacting us. Withdrawing consent does not affect processing already carried out.

Security Check

The Security Check at /security-check is a self-assessment. We collect your multiple choice answers, including the profile answers about your sector, size and where you operate, the email address you give to unlock the full report, and a salted one-way hash of your IP address and browser identifier. We never store the raw IP address and there are no free text fields.

We use this to score your answers, produce and email your report, prevent automated abuse, and tell you how your result compares to similar organisations. Our lawful basis is legitimate interests for running the assessment and sending the result email you asked for, and consent for anything further. Your answers also feed an anonymised benchmark by sector and size, which is only published as averages across at least twenty responses and never identifies you.

Assessment sessions are kept for 12 months. Email addresses and the associated result are kept for 24 months from our last contact with you, unless you ask us to delete them sooner.

Cookies and analytics

We use Google Analytics (provided by Google LLC) to measure how the website is used, such as pages visited and approximate region. We do not use advertising cookies and we do not track you across other websites.

In the UK, EEA and Switzerland, analytics cookies are only set after you accept them in the consent banner. You can reject them there and the site works the same. To change your choice later, clear this site's stored data in your browser and the banner will appear again. Elsewhere, analytics runs by default under legitimate interests and you can object by contacting us.

Sharing and international transfers

We share personal data only where needed with vetted providers supporting hosting, email, document management, communications, professional advice and service delivery, and with authorities where legally required. Some providers may process data outside the UK. Where an adequacy regulation does not apply, we use an appropriate safeguard such as the UK International Data Transfer Agreement or UK Addendum and assess the transfer risk.

Retention

Enquiries that do not become engagements are normally retained for up to 24 months. Email-list data is kept until you unsubscribe or the address is no longer active. Client, supplier, financial and contractual records are normally retained for seven years after the relationship ends, unless a longer or shorter period is required by law, contract, insurance or a documented dispute. Security logs are retained according to their purpose and risk.

Your rights

Depending on the circumstances, you may ask for access, correction, erasure, restriction, portability or objection, and may withdraw consent. You may also ask about safeguards used for an international transfer. We may need to verify your identity and may retain information where an exemption or legal duty applies.

• +Contact hi@protegosol.com to exercise a right.
• +You may complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.
• +We would welcome the opportunity to address your concern before you contact the ICO.

Changes

We will update this notice when our processing or legal obligations change. The date and version at the top identify the current draft.