- The information we collect, use, and why
- Sources of personal information
- Our lawful bases for the collection and processing of your data
- Your data protection rights
- How long we keep information
- Who we share information with
- How to complain
- Our contact details
The information we collect, use, and why
We collect or use the following information to provide our products and services to clients:
- Names and contact details
- Information relating to a request for our services
- Complaints data
- Usage data (including information about how you interact with and use our website, products and services)
- Website user information
We collect or use the following personal information in order to deliver our services to customers:
- Names and contact details
- Addresses
- Purchase or service history
- Marketing preferences
- Technical data, including information about browser and operating systems
We collect or use the following personal information to comply with legal requirements:
- Name
- Contact information
- Customer information
We collect or use the following personal information for dealing with queries, complaints or claims:
- Names and contact details
- Addresses
- Customer records
- Correspondence
Sources of personal information
We collect personal information from the following sources:
- Directly from you
- Suppliers or service providers
- Direct referrals
Our lawful bases for the collection and processing of your data
We must have a lawful basis for collecting and using your personal information under UK data protection law.
Our lawful bases for collecting or processing personal information to provide and improve products and services for customers are:
- Consent – we have permission from you following the provision of all the relevant information. All of your data protection rights may apply, except the right to object. You do have the right to withdraw your consent at any time.
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Our lawful bases for collecting or processing personal information for the operation of customer accounts are:
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Our lawful bases for collecting or processing personal information for information updates or marketing purposes are:
- Consent – we have permission from you following the provision of all the relevant information. All of your data protection rights may apply, except the right to object. You do have the right to withdraw your consent at any time.
- Legitimate interest – we have a business need to keep you updated on our product and service offerings, and for us to send you marketing communications.
Our lawful bases for collecting or processing personal information to comply with legal requirements are:
- Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Our lawful bases for collecting or processing personal information for dealing with queries, complaints or claims are:
- Legitimate interest – we have to collect or use your information for a specific purpose and to ensure we provide a documented response.
Your data protection rights
Your data protection rights are outlined below:
- Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
- Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
- Your right to erasure – You have the right to ask us to delete your personal information.
- Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information.
- Your right to object to processing – You have the right to object to the processing of your personal data.
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
- Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.
If you submit a data subject rights request, we must respond to you without undue delay and in any event within one month.
To make a request, please contact us using the contact details at the bottom of this privacy notice.
How long we keep information
If you’re a current or previous customer, we’ll keep a copy of your personal details for no longer than 6 years, from the time your active relationship with us ends. This retention of data allows us to keep accurate records for tax purposes and to handle any future complaints.
Some of the data processors we use store data outside the UK and the European Economic Area (EEA), including in the United States. Where this happens, we make sure appropriate safeguards are in place to protect your personal information.
For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided below.
Who we share information with
Data processors:
- Webflow – This data processor provides website services
- HubSpot – This data processor provides meeting booking services
- Google – This data processor provides email services and, with your consent, website analytics
We may also share your personal information with:
- Organisations we’re legally obliged to share personal information with
- Publicly on our website, social media or other marketing and information media
- Professional or legal advisors
- Professional consultants
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the bottom of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
- Information Commissioner’s Office
- Wycliffe House
- Water Lane
- Wilmslow
- Cheshire
- SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Our contact details
Pathway2Privacy is a trading name of Greener Gateway Ltd, registered in England and Wales, company number 07319062. Registered office: 9 Tansy Apartments, 31 Inglis Way, London, NW7 1TB.
For any further information relating to this notice or for any data protection queries, please contact us at: dp@pathway2privacy.co.uk
Last updated: 23 October 2026