Privacy Policy

Last updated: 12/06/2026

PJH Associates ("we," "us," "our," or "I" - being Paul Hyslop, trading as PJH Associates) is committed to protecting your privacy. This policy explains what personal information we collect when you use this website, how we use it, and what rights you have over it.

If you have any questions about this policy, please contact Paul Hyslop at paul@pjha.co.uk.

Who we are

PJH Associates is an independent consulting business operated by Paul Hyslop, based in the United Kingdom. For the purposes of UK data protection law, we are the "data controller" responsible for your personal information.

What information we collect

We only collect personal information that you give us directly, either by filling in the contact form on this website or by emailing us. This is limited to:

  • Your name

  • Your email address

  • Any other information you choose to include in your message

We do not knowingly collect personal information from anyone under the age of 16.

How we use your information

We use the information you provide for the following purposes:

  • To respond to your enquiry or question

  • To discuss potential work and follow up on conversations

  • To deliver consulting, training or advisory services you've engaged us for

  • To send occasional updates, insights or marketing communications, but only if you have given us clear permission to do so

We will never sell your personal information to third parties or use it for any purpose other than those listed above.

Our legal basis for using your information

Under UK GDPR, we rely on the following lawful bases for processing your personal information:

  • Consent - where you have actively agreed to receive marketing communications from us

  • Legitimate interests - to respond to enquiries you have sent us and to manage our working relationship with you

  • Contract - where processing is necessary to deliver services you have engaged us for

Marketing communications

If you receive marketing emails or updates from us, you have either given us specific permission to send them or you are an existing client with whom we have an ongoing business relationship. You can ask us to stop sending you marketing communications at any time by replying to any email or emailing paul@pjha.co.uk. We will action your request promptly.

Cookies and analytics

This website uses Squarespace's built-in analytics to help us understand how visitors use the site (for example, which pages are most popular). This involves the use of cookies - small text files placed on your device - that collect information such as your approximate location, device type and how you arrived at the site. This information is aggregated and does not personally identify you.

You can control or block cookies through your browser settings. For more information about how Squarespace uses cookies, please see Squarespace's own Cookie Policy.

How we store your information

The personal information you provide is stored:

  • In our email system (currently Microsoft)

  • In Squarespace's form submission storage, which is hosted on Squarespace's secure servers

  • Where relevant, in our customer records held for ongoing client work

We take reasonable steps to protect your information from unauthorised access, loss or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

How long we keep your information

We only keep your personal information for as long as is necessary for the purpose for which it was collected:

  • General enquiries: we retain enquiry emails and form submissions for up to 2 years, in case you get back in touch

  • Active clients: we retain client records for the duration of our working relationship and for up to 6 years afterwards, to meet HMRC and other legal record-keeping requirements

  • Marketing contacts: we retain contact details for as long as you wish to receive communications from us, and remove them promptly if you unsubscribe

Sharing your information

We do not sell, rent or trade your personal information. We may share it with third parties only in the following limited circumstances:

  • Service providers who help us run our business, such as our email provider, accountancy software, or website host (Squarespace). These providers only process your information on our instructions and under appropriate data protection agreements.

  • Legal obligations - where we are required to disclose information to comply with the law, a court order, or a regulatory request.

Your rights

Under UK GDPR, you have the following rights regarding your personal information:

  • Right of access - you can ask for a copy of the personal information we hold about you

  • Right to rectification - you can ask us to correct any inaccurate information

  • Right to erasure - you can ask us to delete your personal information ("the right to be forgotten")

  • Right to restrict processing - you can ask us to limit how we use your information

  • Right to object - you can object to us using your information, particularly for direct marketing

  • Right to data portability - you can ask for your information in a structured, machine-readable format

To exercise any of these rights, please contact Paul at paul@pjha.co.uk. We will respond within one month.

Complaints

If you are unhappy with how we have handled your personal information, please contact us in the first instance so we can try to put things right. You also have the right to complain to the UK Information Commissioner's Office (ICO):

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or the law. The "Last updated" date at the top of this page will always tell you when the most recent change was made.

Contact

If you have any questions about this privacy policy or how we handle your personal information, please contact:

Paul Hyslop PJH Associates Email: paul@pjha.co.uk