Privacy Policy.
This privacy policy explains how Proudfoot collects, uses, stores, and shares personal information you provide to us through proudfoot.ai and its sub-pages (the “site”). It covers the personal information we collect through the contact form and any other personal information you share with us through the site. Where Proudfoot adds further enquiry or application routes, this notice will be updated to cover them.
This policy is written in the United Kingdom and operates under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where you submit personal information from outside the United Kingdom, the policy operates in line with the equivalent local data protection regime (notably the EU GDPR for European visitors, and applicable state privacy laws for visitors based in other jurisdictions).
We last updated this policy on 8 May 2026.
Data controller.
Proudfoot is the data controller for personal information collected through this site.
If you have questions about this policy or about how we process your personal information, please contact us at the email address above.
Personal information we collect.
We collect personal information in the following ways.
Information you give us through the contact form. The contact form at /#contact collects your name, work email, company or organization, and your message.
Information you give us in an enquiry or engagement. If your enquiry progresses, you may choose to share further context relevant to a potential engagement (for example your industry, site, and role). We process whatever you share with us in that correspondence.
Future enquiry and application routes. As Proudfoot adds further routes to the site (for example a diagnostic intake form or a careers application route), this notice will be updated to describe the additional information those routes collect and how long it is retained.
We do not collect cookies that track your behavior across other sites. We do collect basic site-analytics data (anonymised page views, geographic region, device type) to understand how the site is used; the analytics data is not linked to individuals.
We do not collect special category data (racial or ethnic origin, religious beliefs, political views, health data, or other sensitive categories) unless you provide it in the context of an enquiry or application that genuinely requires it.
Lawful basis for processing.
We process your personal information on the following lawful bases:
Legitimate interest for general business enquiries. When you submit the contact form to ask about commercial, partnership, press, or investor matters, we process your information to respond to the enquiry. We balance our legitimate interest in responding to enquiries with your right to privacy; if you would prefer not to have your information processed on this basis, please tell us in your enquiry and we will accommodate your preference.
Performance of a contract or steps prior to a contract for commercial enquiries that lead to a Proudfoot engagement. When the conversation moves from enquiry to engagement, the personal information processing is part of the steps prior to a contract and (once the contract is signed) part of the performance of the contract.
Consent for marketing communications. We do not add form submitters to a marketing list without separate consent. Where you have given separate consent to receive marketing communications, we will process your information on that basis until you withdraw consent (which you can do at any time).
Legal obligation for retained engagement records, regulatory disclosures, and other legal compliance.
Retention periods.
We retain your personal information for as long as we need it to respond to your enquiry, deliver our services, and meet our legal obligations.
Contact form enquiries. Retained for 2 years from the date of last contact, unless the enquiry leads to an engagement (in which case the engagement retention period applies).
Engagement records. Retained for the duration of the engagement plus 7 years after engagement close, in line with our professional services retention obligations and the requirements of our regulators.
Future enquiry and application routes. Where Proudfoot adds further routes (for example a diagnostic intake form or a careers application route), the retention period for the information they collect will be set out here when those routes are introduced.
We delete or anonymise personal information at the end of the retention period.
Sharing.
We share personal information sparingly and only where necessary.
Inside Proudfoot. Your enquiry is shared with the team member or team that is best placed to respond. Engagement records are shared with the engagement team and with the partnership leadership responsible for the engagement.
Service providers. We use a small number of service providers to deliver the site (hosting, email delivery, analytics) and to run our business (CRM, document management, accounting). These providers process personal information on our behalf under contract and only for the purposes we instruct.
Regulators and legal counterparties. We disclose personal information to regulators, courts, or other legal counterparties where we are legally required to do so.
We do not sell your personal information. We do not share your personal information with third parties for their own marketing.
International transfers.
Personal information you submit through the site is stored on systems hosted in the United Kingdom and the European Union. Some of our service providers may process information in other jurisdictions; where this happens, we use the contractual safeguards required by the UK GDPR (UK International Data Transfer Agreement, EU Standard Contractual Clauses, or equivalent) to protect your information.
Your rights.
Under the UK GDPR you have the following rights in relation to your personal information.
- Right of access.
- You can ask for a copy of the personal information we hold about you.
- Right to rectification.
- You can ask us to correct personal information that is inaccurate or incomplete.
- Right to erasure.
- You can ask us to delete personal information we hold about you, subject to our legal and regulatory retention obligations.
- Right to restriction of processing.
- You can ask us to stop processing your personal information for specific purposes.
- Right to data portability.
- You can ask us to provide you with a copy of your personal information in a structured, commonly used format.
- Right to object.
- You can object to processing on grounds of legitimate interest.
- Right to withdraw consent.
- Where we process your information on the basis of consent, you can withdraw consent at any time.
- Right to lodge a complaint.
- You can complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal information.
You can complain to the ICO at ico.org.uk. To exercise any of these rights, please contact privacy@proudfoot.com. We will respond within 1 month of the request.
Changes.
We may update this policy from time to time. The “last updated” date at the top of the policy reflects the most recent change. Material changes will be highlighted on the home page or the privacy page itself for at least 30 days.