Last Updated: November 2025
Privacy Policy
Your privacy is fundamental to our mission. Learn how Perspico Data protects and manages your information with enterprise-grade security standards.
Important Notice
This Privacy Policy explains how Perspico Data Ltd Consulting ("we," "our," or "us") collects, uses, and protects your personal information when you use our website and services. As a data consultancy specializing in AI, analytics, and cloud solutions, we handle both personal data and client business data with the highest standards of security and compliance.
Information We Collect
Personal Information
- Name, email address, phone number, job title
- Company name, industry sector, and business needs
- Communication preferences and contact history
- Professional background and project requirements
- Billing and payment information
Technical Information
- IP address, browser, and device details
- Website usage behaviour and interaction patterns
- Cookies and similar tracking technologies
- Referral sources and navigation paths
- Server logs, diagnostics, and error reports
Business Information
- Project specifications, scope, and requirements
- Data analysis objectives and performance goals
- Budget expectations and timeline preferences
- Industry-specific regulations and compliance needs
- Information about existing data sources and processing workflows
Client Data (When We Act as a Data Processor)
- Data sets and files provided for analytics
- Business intelligence metrics and KPIs
- Data quality assessments and recommended improvements
- Custom models, algorithms, and analytical outputs
- Compliance‑related information required for audits or regulation
How We Use Your Information
Service Delivery
- Deliver data consulting and analytics services
- Develop customised solutions tailored to your organisation
- Communicate updates, timelines, and deliverables
- Provide ongoing technical assistance and support
- Build dashboards, reports, and visualisations
Business Operations
- Process payments and manage contractual relationships
- Improve our website, tools, and internal processes
- Conduct internal market and service research
- Meet legal and regulatory obligations
- Maintain client accounts and long‑term relationships
Marketing Communications
- Share insights, trends, and relevant updates
- Notify you of new services or enhancements
- Invite you to webinars, demos, or industry events
- Share anonymised case studies
- Provide educational resources and best‑practice guides
Data Processing Activities
Data Analysis Services
- Statistical analysis and exploratory research
- Machine learning and modelling
- Predictive analytics and trend forecasting
- Custom reports and data visualisation
- KPI tracking and performance measurement
Data Transformation
- Data cleaning, validation, and standardisation
- Format conversion and unification
- Data integration from multiple sources
- ETL workflows and automation
- Real‑time or streaming data processing
Cloud & Infrastructure
- Secure cloud‑based storage and compute
- Backup, disaster recovery, and redundancy
- Scalable analytics environments
- API access management and controls
- Monitoring, optimisation, and performance tuning
Data Security Measures
Technical Safeguards
- TLS 1.3 encryption for data in transit
- AES‑256 encryption for data at rest
- Secure cloud platforms with granular access controls
- Regular penetration testing and security reviews
- Multi‑factor authentication and zero‑trust security principles
Organisational Measures
- Staff training on security and data protection
- Role‑based access permissions
- Disaster recovery and continuity planning
- Incident response protocols
- Background checks for team members
Compliance Standards
- UK GDPR compliance
- SOC 2 Type II and ISO 27001‑aligned controls
- Industry‑specific compliance where required
- Routine audits and security assessments
- Data Protection Impact Assessments
Your Privacy Rights
Access & Control
- Right to access your data
- Right to correct inaccurate information
- Right to request deletion (where legally permissible)
- Right to data portability
- Right to object to certain processing
GDPR Rights for EU Residents
- Right to object to legitimate‑interest processing
- Right to restrict processing
- Right to lodge complaints with supervisory authorities
- Right to withdraw consent
- Right to portability and transparency
International Data Transfers
Cross‑Border Processing
- Data may be processed in the UK, EU, or US
- All transfers comply with UK GDPR and applicable laws
- Standard Contractual Clauses (SCCs) where required
- Adequacy decisions and secure transfer frameworks
Service Provider Locations
- AWS (multi‑region infrastructure)
- Google (analytics services)
- Microsoft 365 (EU/UK data options)
- Stripe (global PCI DSS‑compliant payment processing)
Data Retention
Retention Periods
- Client data: engagement duration + 7 years
- Marketing data: until opt‑out or 3 years of inactivity
- Website analytics: 26 months
- Financial documentation: 7 years
Secure Deletion
- Automated deletion workflows
- Secure erasure and overwrite procedures
- Certificates for physical media destruction
- Client‑directed return or deletion of data
Children's Privacy
- Our services are not directed at individuals under 16
- We do not knowingly collect children's data
- If we become aware of such collection, we will delete it promptly
- Parents may contact us to request deletion
- We comply with COPPA and children's privacy requirements
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
For significant changes that affect your rights, we will provide additional notice through email or prominent website notifications at least 30 days before the changes take effect.
Contact Information
Your Rights
- Access your personal data
- Correct inaccurate information
- Request data deletion
- Object to processing
- Data portability
Compliance Standards
UK GDPRSOC 2 Type IIISO 27001PCI DSS