- We only collect what you choose to send us, such as your name, work email and message, plus basic technical logs that keep the site secure.
- We use it to reply to you, arrange and hold consultations, and work with you if you become a client.
- This website sets no cookies and runs no analytics, advertising or tracking.
- We never sell your data. You can ask to see, correct or delete it at any time.
01Who we are
This policy explains how Provantar Limited, a company registered in England and Wales, ("Provantar", "we", "us") collects, uses and protects personal data when you visit www.provantar.com (the "website"), contact us, or book a consultation.
Provantar is the controller of this personal data. That means we decide how and why it is used, and we are responsible for it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we deal with people in the European Economic Area or Nigeria, we also follow the EU GDPR and the Nigeria Data Protection Act 2023 where they apply.
If you have any questions about this policy or how we handle your data, email hello@provantar.com.
02What this policy covers
This policy covers personal data we collect through the website, through enquiries and consultation bookings, and in the course of business relationships with clients, prospective clients, partners and suppliers.
It does not cover data we process on behalf of our clients during an engagement, for example data held in a client's cloud environment. In that case our client is the controller, we act as their processor, and the terms of our written agreement and data processing agreement with that client apply.
03Information we collect
Information you give us
- Contact form: your name, work email address, company name, the area you need help with, and anything you write in your message.
- Booking a consultation: when you book through our scheduling page, you give your name, email address and any notes you add to the booking.
- Emails and calls: what you share with us when you email us, speak to us or meet with us, such as your job title, phone number and details about your organisation and its technology.
- Clients and suppliers: business contact and billing details needed to agree, deliver and invoice for our services.
Information collected automatically
When you visit the website, our hosting and infrastructure providers automatically record standard technical information in server logs. This includes your IP address, browser and device type, the pages requested, the referring page, and the date and time of your visit. We use these logs only to keep the website running, secure and protected from abuse. We do not use them to build profiles of visitors.
Information from other sources
We may receive business contact details from people who refer you to us, from partners such as Amazon Web Services when you ask to be introduced to us, or from public professional sources such as your company website or LinkedIn profile.
We do not ask for special category data, such as health information, and we ask you not to include it in messages to us.
04How we use your information
Data protection law only allows us to use personal data where we have a lawful basis. The table below sets out what we do with your data and the basis we rely on.
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and answering your questions | Our legitimate interests in responding to people who contact us, or taking steps at your request before entering into a contract |
| Scheduling and holding consultations | Taking steps at your request before entering into a contract |
| Delivering our services, managing the client relationship and invoicing | Performance of a contract with you or your organisation |
| Sending occasional updates about our services and insights to business contacts | Our legitimate interests in promoting our business, and your consent where the law requires it. You can opt out at any time. |
| Keeping the website and our systems secure, and preventing fraud and abuse | Our legitimate interests in protecting our business and our visitors |
| Keeping business and accounting records, and responding to lawful requests | Compliance with a legal obligation |
| Establishing, exercising or defending legal claims | Our legitimate interests |
Where we rely on legitimate interests, we have balanced our interests against your rights and expectations. You can ask us for more detail about this balance.
We do not make decisions about you using solely automated processing, including profiling, that have legal or similarly significant effects.
07International transfers
We are based in the United Kingdom and serve clients worldwide. Some of our service providers, or their support teams, are located outside the UK.
When we transfer personal data outside the UK, or the EEA where the EU GDPR applies, we make sure it stays protected. We do this by transferring only to countries the UK government has found to give adequate protection, or by using approved safeguards. These include the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum. You can ask us for a copy of the safeguards that apply.
08How long we keep it
We keep personal data only as long as we need it for the purpose we collected it for, including to meet legal, accounting and reporting requirements.
- Enquiries and consultations that don't lead to an engagement: up to 2 years after our last contact, then deleted.
- Client and supplier records: for the length of the relationship and up to 6 years after it ends, in line with UK tax and limitation rules.
- Marketing preferences: until you opt out. After that we keep a minimal record so that we don't contact you again.
- Server logs: for a short period set by our hosting providers, normally no more than a few months.
When we no longer need personal data, we securely delete it or make it fully anonymous.
09How we protect it
Security is at the heart of what we do for our clients, and we apply the same standards to our own systems. We use appropriate technical and organisational measures to protect personal data. These include encryption in transit and at rest, access controls with multi-factor authentication, least-privilege access and staff confidentiality.
No method of sending data over the internet is completely secure. If a personal data breach is likely to put your rights and freedoms at risk, we will tell you and the relevant regulator without undue delay, as the law requires.
10Your rights
Under data protection law you have the right to:
- access the personal data we hold about you and get a copy of it
- correct data that is inaccurate or incomplete
- erase your data in certain circumstances
- restrict how we use your data in certain circumstances
- object to processing based on our legitimate interests, and to direct marketing at any time
- data portability, which means receiving data you gave us in a commonly used, machine-readable format, or having it sent to another organisation
- withdraw consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.
To use any of these rights, email hello@provantar.com. Using your rights is free. We may need to confirm your identity first, and we will reply within one month. If your request is complex we may need up to two more months, and if so we will tell you.
Every marketing email we send includes a way to unsubscribe.
11Complaints
If you are unhappy with how we have handled your personal data, please contact us first at hello@provantar.com so we can try to put it right.
You also have the right to complain to a data protection regulator:
- United Kingdom: the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113
- European Economic Area: the data protection authority in the country where you live or work
- Nigeria: the Nigeria Data Protection Commission, at ndpc.gov.ng
12Children
Our website and services are intended for businesses and professionals. They are not aimed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
13Links to other websites
The website contains links to websites and services we do not control, including our scheduling page and LinkedIn. We are not responsible for their privacy practices, so please read their privacy policies before giving them your data.
14Changes to this policy
We may update this policy from time to time, for example when we start using a new service provider or the law changes. The date at the top of this page shows when it was last updated. If we make a significant change that affects how we use data you have already given us, we will tell you directly where we can.
15Contact us
For any question about this policy or your personal data, contact us at:
Provantar Limited
Email: hello@provantar.com