Privacy Policy.

This privacy policy explains how PP&E Limited, trading as The Transformation & Growth Advisory™ (“TTGA”, “we”, “us” or “our”), collects, uses, stores and shares personal information when you visit our website, complete a scorecard, join our email list, book a call, make an enquiry, purchase or receive our services, or otherwise interact with us.

It applies across thetransformationadvisory.co.uk, associated landing pages, scorecard and results pages, sales pages, booking pages, checkout pages and client communications controlled by TTGA.

1. Who we are

The data controller is PP&E Limited, trading as The Transformation & Growth Advisory™.

DETAIL

Company number

Registered office

Privacy contact

Website

INFORMATION

06604486

Bolsover, Chesterfield, Derbyshire, England, S44 6NQ

2. The personal information we collect

Depending on how you interact with us, we may collect:

  • Identity and contact information: such as your name, email address, telephone number, postal address and social-media profile details.

  • Business and professional information: such as your business name, role, industry, website, revenue range, team size, business goals, current challenges and information about how your business operates.

  • Scorecard and diagnostic information: including your answers, scores, category results, reflections and any information you provide when completing the Business Growth Self-Diagnostic™, a questionnaire or a strategic diagnostic.

  • Enquiry, booking and communication information: including messages, call-booking details, correspondence, call notes, feedback and records of our interactions. Calls are not recorded unless we tell you in advance and obtain any consent required by law.

  • Client and service information: including contracts, onboarding information, working documents, strategic plans, deliverables, progress notes and information needed to provide our services.

  • Transaction information: including purchases, invoices, payment status and billing information. Payment-card details are normally collected and processed directly by our payment provider rather than stored by us.

  • Marketing information: including your communication preferences, consent records, email engagement and responses to campaigns or offers.

  • Technical and usage information: such as IP address, browser type, device information, pages visited, referral source, dates and times of visits, and information collected through cookies or similar technologies.

  • Please do not provide special category information (for example, detailed health information, racial or ethnic origin, political opinions, religious beliefs, trade-union membership, genetic or biometric data, sexual orientation or sex-life information) unless it is genuinely necessary and we have asked for it. If you voluntarily provide such information, we will only use it where we have a lawful basis and an additional condition under data-protection law.

3. How we collect personal information

We may collect personal information:

  • Directly from you when you complete a form, scorecard or questionnaire; subscribe; book a call; contact us; purchase a service; attend a session; or provide feedback.

  • Automatically when you use our website and associated pages, through cookies, analytics and similar technologies.

  • From third-party platforms that support our website, scorecard, booking, CRM, email, payment or service-delivery processes.

  • From referrals, introductions, professional networks, social-media platforms and publicly available business sources where it is lawful and relevant to our business-to-business activities.

4. How and why we use your information

We only use personal information when we have a lawful basis. The main purposes and lawful bases are set out below.

PURPOSE

HOW WE USE THE INFORMATION

LAWFUL BASIS

Provide the website, scorecard and personalised results 

To operate the website, process responses, calculate scores, display results and maintain security. 

Legitimate interests in operating and improving our business and services; contract where the service forms part of an agreement with you. 

Respond to enquiries and manage calls 

To respond, assess suitability, arrange appointments and follow up. 

Legitimate interests; steps taken at your request before entering into a contract. 

Provide paid services 

To onboard clients, deliver Diagnostics, Business Surgery™, the Accelerator and other advisory services, communicate and manage the relationship. 

Performance of a contract; steps before entering into a contract. 

Process payments and keep financial records 

To issue invoices, process payments, manage refunds and meet tax, accounting and legal obligations. 

Performance of a contract; legal obligation; legitimate interests in financial administration. 

Send marketing and nurture communications 

To send resources, insights, newsletters, invitations and information about relevant services. 

Consent where required; otherwise legitimate interests where permitted by direct-marketing law. 

Improve services and understand performance 

To analyse website, funnel, scorecard, email and service performance; obtain feedback; and improve content and customer experience. 

Legitimate interests; consent for cookies or similar technologies where required. 

Protect our business and enforce rights 

To prevent fraud and misuse, keep systems secure, establish or defend legal claims and enforce agreements. 

Legitimate interests; legal obligation. 

5. Scorecard results and automated processing 

The Business Growth Self-Diagnostic™ uses your answers to calculate an overall score and category-level results using pre-set scoring rules. This is a form of automated processing used to provide an indicative self-assessment. 

The scorecard does not make decisions that produce legal or similarly significant effects. Its results are not professional, financial or legal advice and do not replace a personalised assessment. Any recommendation about working with us is reviewed through a human conversation and, where appropriate, a separate paid diagnostic process. 

6. Email marketing 

If you ask to receive our emails, complete a form containing an appropriate marketing choice, or where we are otherwise permitted by law, we may send you useful resources, insights, invitations and information about relevant services. 

You can unsubscribe at any time using the link in any marketing email or by contacting [email protected]. Withdrawing consent or objecting to marketing will not affect service or administrative communications that we still need to send. 

7. Cookies and similar technologies 

Our website and associated pages may use cookies, pixels and similar technologies to operate securely, remember choices, understand usage and measure the performance of our content and funnels. 

Strictly necessary technologies may operate without consent where permitted by law. Where consent is legally required for analytics, advertising or other non-essential technologies, they should not be activated until you have made your choice. You can use the website’s cookie controls to accept, reject or change your preferences. 

The website must provide a separate, up-to-date Cookie Notice or cookie-preference panel listing the technologies actually in use, their providers, purposes and duration. Browser settings may also allow you to delete or block cookies, although parts of the website may not work correctly as a result. 

8. Who we share information with 

We may share personal information only where reasonably necessary with: 

  • Website hosting, security, analytics and technical-support providers.

  • Scorecard, form, CRM, booking, email-automation and marketing-platform providers.

  • Payment processors, accounting providers and financial advisers.

  • Video-conferencing, messaging, document-storage and client-delivery providers.

  • Professional advisers, insurers, contractors and service providers who support our business under appropriate confidentiality or data-protection obligations.

  • Regulators, courts, law-enforcement bodies or other authorities where disclosure is required or permitted by law.

  • A purchaser, investor or adviser in connection with a proposed sale, restructuring or transfer of all or part of our business, subject to appropriate safeguards. 

9. International transfers 

Some service providers may process or store personal information outside the United Kingdom. Where this involves a restricted transfer, we will use an approved transfer mechanism where required, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful safeguard. You can contact us for further information about the safeguards relevant to your data. 

10. How long we keep information 

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements. Our usual retention periods are:

RECORD TYPE

USUAL RETENTION PERIOD

Enquiries and non-client call records 

Up to 24 months after the last meaningful interaction, unless needed longer for a legal claim or continuing relationship. 

Scorecard responses and results 

Normally up to 24 months after completion or the last meaningful interaction, subject to earlier deletion where appropriate. 

Marketing records 

Until you unsubscribe, object or withdraw consent, or until we determine the information is no longer needed. We may keep a minimal suppression record to ensure we honour your preference. 

Client and contractual records 

Normally six years after the client relationship or relevant transaction ends, or longer where required to establish, exercise or defend legal claims. 

Financial and tax records 

At least the period required by applicable company, accounting and tax law, normally six years. 

Technical and security records 

For the period reasonably necessary for security, troubleshooting and analytics, according to the relevant system and cookie settings. 

11. How we protect personal information 

We use reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, misuse, alteration, disclosure or access. Access is limited to people and providers who need the information for legitimate business purposes and who are subject to appropriate duties of confidentiality. 

No internet transmission or storage system is completely secure. If we become aware of a personal-data breach, we will investigate and notify affected individuals and the Information Commissioner’s Office where the law requires us to do so. 

12. Your data-protection rights 

Depending on the circumstances, you may have the right to: 

  • Ask for access to the personal information we hold about you.

  • Ask us to correct inaccurate or incomplete information.

  • Ask us to erase personal information in certain circumstances.

  • Ask us to restrict how we use personal information in certain circumstances. 

  • Object to processing based on legitimate interests and object at any time to direct marketing.

  • Receive certain information in a portable format or ask us to transfer it where the right applies.

  • Withdraw consent at any time where we rely on consent.

  • Ask for human intervention in relation to qualifying solely automated decisions, although we do not currently use such decisions to produce legal or similarly significant effects.

To exercise a right, email [email protected]. We may need to verify your identity. Rights are subject to legal conditions and exemptions, and we will normally respond within one month. 

13. Complaints 

Please contact us first if you have concerns so that we can try to resolve them. You also have the right to complain to the UK Information Commissioner’s Office (ICO). Information about raising a concern is available at https://ico.org.uk/make-a-complaint/. You may also contact the supervisory authority in the country where you live or work if applicable. 

14. Children 

Our website, scorecards and services are intended for business owners and professionals aged 18 or over. They are not directed at children, and we do not knowingly collect personal information from children through these services. If you believe a child has provided information to us, please contact us so that we can take appropriate action. 

15. Third-party websites and social media 

Our website and communications may contain links to third-party websites, booking pages, payment pages and social-media platforms. Those organisations control their own processing when you use their services. We encourage you to read their privacy information; we are not responsible for their independent privacy practices. 

16. Changes to this policy 

We may update this policy when our services, suppliers or legal obligations change. The latest version will be published on our website with a revised ‘last updated’ date. Where a change is material, we may provide additional notice where appropriate. 

17. Contact us 

For questions, requests or concerns about this policy or our use of personal information, contact: 

PP&E Limited trading as The Transformation & Growth Advisory™ 

Email: [email protected] 

Registered office: Bolsover, Chesterfield, Derbyshire, England, S44 6NQ 

© The Transformation & Growth Advisory. 2026. All Rights Reserved. Privacy Policy