Privacy Policy

Performance West Ltd ("Performance West," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or otherwise interact with us. We are the data controller for the personal data described in this policy.

Information We Collect

We collect information that you voluntarily provide to us when you:

• • Submit a contact form — We collect your name, email address, phone number, company name, and the content of your message.
• • Subscribe to our mailing list — We collect your email address and, optionally, your name and company.
• • Place a service order — We collect the information necessary to provide the requested compliance consulting services, which may include business records, licence details, and other compliance-related documentation.
• • Open a support ticket — We collect your name, email address, and the content of your support request through our support widget.

Legal Basis for Processing

Under the UK GDPR and, where applicable, the EU GDPR, we process your personal data on the following legal bases: performance of a contract (to deliver services you have ordered), legitimate interests (to respond to enquiries and improve our services), and consent (for our mailing list, which you may withdraw at any time).

How We Use Your Information

We use the information we collect for the following purposes:

• • Providing services — To deliver the compliance consulting services you have requested, including preparing reports, filings, and related deliverables.
• • Communication — To respond to your inquiries, send service-related updates, and provide customer support.
• • Mailing list — To send periodic updates about our services, compliance news, and regulatory changes. You may unsubscribe at any time.
• • Improving our services — To understand how our website and services are used and to make improvements.

Security Measures

We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, use, modification, or disclosure. All data transmitted to and from our website is encrypted using TLS. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Cookies

Our website uses minimal cookies. We may use analytics cookies to understand how visitors interact with our site, such as which pages are visited most frequently and how visitors navigate the site. These analytics cookies do not collect personally identifiable information. We do not use cookies for advertising or tracking across third-party websites.

International Data Transfers

Some of our service providers are located outside the UK/EEA. Where we transfer personal data internationally, we rely on adequacy decisions or appropriate safeguards such as Standard Contractual Clauses (or the UK International Data Transfer Addendum) to protect your information.

Third-Party Services

We use ERPNext, a self-hosted business management platform, to manage support tickets, orders, and customer communications. When you submit a contact form or open a support ticket, your information is processed through our self-hosted ERPNext instance. We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. If you request deletion of your personal information, we will process your request within 30 days, subject to any legal retention requirements.

Your Rights (UK GDPR / EU GDPR)

Depending on where you are located, data protection law gives you the following rights over your personal data:

• • Right of access — You can ask us to confirm what personal data we hold about you and request a copy of it.
• • Right to rectification — You can ask us to correct inaccurate or incomplete personal data.
• • Right to erasure — You can ask us to delete your personal data, subject to certain legal exceptions.
• • Right to restrict or object to processing — You can ask us to limit how we use your data, or object to certain processing based on legitimate interests.
• • Right to data portability — You can ask us to provide your data in a structured, machine-readable format.
• • Right to lodge a complaint — You have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to your local supervisory authority if you are in the EU.

To exercise any of these rights, please contact us at privacy@performancewest.net.

Children's Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as promptly as possible.

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of England and Wales. Any disputes arising under or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.