Website Privacy Policy
Document reference: ISO_webpage_legal-privacy-policy_v1
Last modified: 24 March 2026
Effective Date: 1 January 2025
ICO Registration Number: ZA505303 — registered as a Data Controller under the Data Protection (Charges and Information) Regulations 2018. Verify on the ICO register →
1. Legal Information
This privacy policy sets out how Coaley Peak Limited collects, uses, and protects personal data when you use our website. Coaley Peak Limited is the data controller responsible for your personal data.
2. Personal Data We Collect
We may collect personal data including your name, email address, telephone number, company name, IP address, browser type, and information you provide through contact forms or enquiry submissions.
3. How We Use Your Personal Data
We use your personal data to respond to enquiries, provide our services, improve our website, comply with legal obligations, and communicate with you about our services where you have provided consent.
4. Legal Basis for Processing
We process personal data on the following legal bases under UK GDPR Article 6: consent, performance of a contract or pre-contractual step, compliance with a legal obligation, and legitimate interests pursued by Coaley Peak Limited. The table below maps each processing activity to its specific legal basis.
| Processing activity | Legal basis |
|---|---|
| Handling enquiries submitted via the contact form or email | Art. 6(1)(b) — performance of a (pre-)contractual step |
| Processing training booking requests | Art. 6(1)(b) — performance of a (pre-)contractual step |
| Measuring website visits and user behaviour via Google Analytics | Art. 6(1)(a) — consent (analytics cookies) |
| Personalising website content based on role/industry selection | Art. 6(1)(f) — legitimate interests (improving site relevance) |
| Complying with legal and regulatory obligations | Art. 6(1)(c) — legal obligation |
| Communicating with existing clients about service delivery | Art. 6(1)(b) — performance of contract |
5. Sharing Your Personal Data
We do not sell your personal data. We may share data with trusted service providers who assist in operating our website and services, subject to appropriate data processing agreements. We may also disclose data where required by law.
6. Cookies
Our website uses cookies and similar tracking technologies. For full details, please refer to our Cookie and Tracking Policy.
7. Data Protection
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures are regularly reviewed and updated.
8. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation, you have the right to access, rectify, erase, restrict processing, object to processing, and request data portability of your personal data. You also have the right to withdraw consent at any time.
9. Data Retention
Form submissions and enquiry data are retained for 12 months. Analytics data collected via Google Analytics is retained for 14 months. We review retention periods regularly and securely delete data that is no longer required.
10. International Transfers and Third-Party Recipients
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs), to protect your data in accordance with UK GDPR requirements.
We use Google Analytics (GA4), operated by Google LLC. Analytics data may be transferred to the United States under Standard Contractual Clauses approved by the UK Information Commissioner. For details of Google's data processing, see Google's Privacy Policy.
11. Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.
13. Children's Privacy
Our website and services are not directed at individuals under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware of such collection, we will take steps to delete the data promptly.
14. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
15. Data Protection Officer
Coaley Peak Limited does not have a statutory obligation to appoint a Data Protection Officer (DPO) given the nature and scale of its processing activities. However, all data protection queries, requests to exercise data subject rights, and complaints should be directed to privacy@coaleypeak.co.uk.
16. Contact
For questions about this privacy policy or to exercise your data protection rights, please contact us at privacy@coaleypeak.co.uk.
Document reference: ISO_webpage_legal-privacy-policy_v1
Last modified: 24 March 2026
Legal & Compliance·Website Privacy Policy