Privacy Policy
What we collect, why, and what you can do about it. In plain English, no guff.
Last updated: 4 September 2026.
Who we are
Punk Consulting Ltd is a company registered in England & Wales, company number 17306665, registered office at 9 Lyndhurst Road, Reigate, RH2 8JW. We are registered with the Information Commissioner's Office (ICO) as a data controller, registration reference ZC206384. You can check this at any time on the ICO's public register at ico.org.uk.
This policy covers data we collect through this website and in the course of running our business (enquiries, proposals, invoicing). It does not cover personal data we may handle on behalf of a client during a paid engagement, that is covered separately in our Terms of Business, where Punk acts as a data processor, not a controller, and never retains client data beyond the engagement.
What we collect
We only collect what you give us directly, plus a small amount of anonymised analytics data if you agree to it via the cookie banner shown on your first visit.
- Contact form: name, company, email address, and whatever you tell us in the message field, submitted via our contact page.
- Direct email: anything you send to hello@punkconsulting.co.uk or in the course of a conversation, discovery call, or engagement.
- Website analytics: only if you accept the cookie banner. Covered in full below.
Cookies and analytics
If you accept the cookie banner shown on this site, we use Google Analytics to understand how many people visit, which pages they read, and roughly where they came from. This is aggregated, anonymised data. It doesn't identify you personally, and we don't use it for advertising or hand it to anyone beyond Google as our analytics provider.
If you decline the banner, or don't respond to it, no analytics cookies are set and nothing is sent to Google. You can change your mind at any time by clearing this site's data in your browser settings, which resets your choice and shows the banner again on your next visit.
Google's own privacy policy covers how it processes this data: policies.google.com/privacy.
Why we collect it
Solely to respond to your enquiry, arrange a discovery session, and, if we work together, to deliver and administer that engagement (proposals, contracts, invoicing). Our lawful basis is legitimate interest (responding to enquiries you've initiated) or, once you become a client, performance of a contract. For analytics cookies, our lawful basis is your consent, given via the cookie banner, which you can withdraw at any time as described above.
Who else sees it
Contact form submissions are processed by Web3Forms, a third-party form-delivery service, purely to route your message to our inbox. If you've accepted analytics cookies, anonymised visit data is processed by Google Analytics. We don't share your details with anyone else, sell them, or use them for marketing you haven't asked for.
How long we keep it
Enquiries that don't turn into work are kept for a reasonable period in case you get back in touch, then deleted. Records relating to actual client engagements (contracts, invoices) are kept as long as UK tax and company law requires. Any client personal data we've processed as part of delivering work is purged once the engagement closes, not retained indefinitely.
Your rights
Under UK GDPR you can ask us what we hold on you, ask us to correct or delete it, or object to how we're using it. Email hello@punkconsulting.co.uk and we'll sort it out directly. If you're not happy with our response, you can complain to the ICO at ico.org.uk.
Questions
If any of this is unclear, just ask. Email hello@punkconsulting.co.uk.