Privacy policy.
Last updated: 17 August 2026
People & Purpose Consultancy Ltd ("People & Purpose", "we", "us" or "our") is committed to protecting your privacy and handling personal information responsibly.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the rights you have in relation to your information.
People & Purpose Consultancy Ltd is the data controller for personal information processed through this website and in connection with our own business activities.
Who we are
People & Purpose Consultancy Ltd is an organisational and people consultancy providing services including organisational effectiveness, leadership and capability, people risk, investment and due diligence, and organisational diagnostics.
Registered office: 5 South Charlotte Street, Edinburgh, EH2 4AN.
For questions about this Privacy Policy or how we use your personal information, please contact us through the contact details provided on our website.
What personal information we collect
The information we collect depends on how you interact with us.
It may include:
your name, job title, organisation and contact details;
information you provide when contacting us, making an enquiry or arranging a conversation;
information provided in connection with a consultancy engagement;
information you provide when registering for or completing one of our diagnostics, surveys or assessments;
responses to diagnostic, survey or assessment questions;
demographic or organisational information you choose to provide;
feedback you provide to us;
information relating to your use of our website, such as IP address, browser information, device information and pages visited; and
marketing preferences and information about your interactions with our communications.
Where we undertake work for an organisational client, we may also receive relevant personal information from that organisation rather than directly from you.
We only seek to collect information that is relevant and proportionate to the purpose for which it is being used.
How we use your personal information
We may use personal information to:
respond to enquiries and communicate with you;
provide proposals, consultancy services and client support;
manage our relationships with clients and prospective clients;
administer diagnostics, surveys and assessments;
produce individual, team or organisational reports and insights where appropriate;
undertake analysis and research to improve our diagnostic tools and consultancy services;
develop aggregated benchmarks and organisational insights;
manage our website and understand how it is used;
maintain appropriate business, financial and administrative records;
comply with our legal and regulatory obligations; and
send relevant updates, insights or marketing communications where permitted.
We will not sell your personal information.
Assess. Don't Guess.™ diagnostics
People & Purpose develops and operates the Assess. Don't Guess.™ suite of organisational diagnostics.
When you participate in one of our diagnostics, we may collect your contact information, responses and relevant contextual or demographic information.
We use this information to provide feedback or reports, understand organisational patterns and further develop and validate our diagnostic approach.
Where diagnostic data is used for research, benchmarking or the development of future insights, we aim to use aggregated or anonymised information wherever practicable so that individual participants are not identifiable.
Our diagnostics are intended to provide insight and support professional judgement. They are not designed to make solely automated decisions about individuals that have legal or similarly significant effects.
Where we administer a diagnostic or assessment on behalf of a client organisation, additional privacy information may be provided explaining how information will be used within that particular project.
Assessments and psychometric information
As part of our consultancy work, we may use assessment or psychometric tools provided by third-party assessment providers.
Where this happens, we will explain the purpose of the assessment and how the resulting information will be used. Assessment providers may process personal information in accordance with their own privacy arrangements and/or under contractual arrangements with People & Purpose or our client.
Assessment information is used as one source of evidence and is interpreted alongside relevant organisational context, behavioural evidence and professional judgement.
Our lawful bases for processing
Under UK data protection law, we must have a lawful basis for using personal information.
Depending on the circumstances, we may rely on:
Contract — where processing is necessary to provide services under a contract or to take steps at your request before entering into a contract.
Legitimate interests — where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. This may include managing client relationships, improving our services, developing our diagnostics and communicating with existing business contacts.
Consent — where you have actively agreed to a particular use of your information, for example certain marketing communications or non-essential website cookies. Where we rely on consent, you may withdraw it at any time.
Legal obligation — where we need to process information to comply with a legal or regulatory requirement.
In some consultancy engagements, our client may determine the purposes for which personal information is processed. In those circumstances, the client may be the data controller and People & Purpose may act as a data processor or independent controller depending on the nature of the work.
Special category information
Some consultancy assignments may involve information that is considered particularly sensitive under data protection law, known as "special category data".
We will only collect or process special category information where it is necessary and where an appropriate lawful condition applies. We will take additional care to protect this information.
We do not routinely request special category information through our general website contact forms or organisational diagnostics unless there is a clear reason for doing so.
Marketing communications
We may send you information about People & Purpose, our services, diagnostics, events or insights where you have consented to receive this information or where we are otherwise permitted to do so under applicable law.
You can unsubscribe from marketing communications at any time by using the unsubscribe link in an email or by contacting us.
Opting out of marketing communications will not affect service-related communications that we need to send in connection with an existing enquiry or client relationship.
Who we share information with
We may use trusted third-party service providers to help operate our business and deliver our services. These may include providers of:
website hosting and website functionality;
email and business productivity services;
customer relationship management and administrative systems;
diagnostic, survey and assessment platforms;
psychometric and assessment tools;
scheduling and communication services;
accounting and professional services; and
data storage, analytics and IT support.
We only share information where there is a legitimate reason to do so and seek to ensure appropriate contractual and security arrangements are in place.
We may also disclose information where required by law or where necessary to establish, exercise or defend legal rights.
International transfers
Some of the technology providers we use may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place as required by UK data protection law. These may include transfers to countries recognised as providing an adequate level of protection or the use of approved contractual safeguards.
How long we keep personal information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including any legal, accounting, contractual or reporting requirements.
Retention periods vary depending on the nature of the information and our relationship with you.
When determining how long information should be retained, we consider its nature and sensitivity, why we hold it, relevant contractual requirements and any applicable legal obligations.
Where information is no longer required, we will securely delete or anonymise it where appropriate.
Aggregated or anonymised information that no longer identifies an individual may be retained for research, benchmarking and service-development purposes.
How we protect your information
We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure or alteration.
These measures include appropriate access controls, secure systems and services, and limiting access to personal information to people who need it for legitimate business purposes.
However, no method of electronic storage or transmission over the internet can be guaranteed to be completely secure.
Cookies and website analytics
Our website may use cookies and similar technologies to enable website functionality, understand how visitors use the site and improve the visitor experience.
Some cookies are necessary for the website to operate. Where required, we will ask for your consent before using non-essential cookies or similar technologies.
More information about the cookies used on our website is available in our Cookie Policy.
The ICO confirms that visitors need to be told about cookies and that consent is generally required for cookies that aren't strictly necessary.
Your data protection rights
Depending on the circumstances and the lawful basis on which we process your information, you may have the right to:
ask for a copy of the personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete your personal information;
ask us to restrict how we use your information;
object to certain uses of your personal information;
request the transfer of information you have provided to us in certain circumstances; and
withdraw consent at any time where we rely on consent.
These rights are not absolute and may not apply in every circumstance.
You also have the right to object to processing based on our legitimate interests and to object to the use of your personal information for direct marketing.
To exercise any of your rights, please contact us. We may need to verify your identity before responding to a request.
Complaints
If you have concerns about how we have handled your personal information, please contact us first so that we have an opportunity to address them.
You also have the right to make a complaint to the UK's data protection regulator, the Information Commissioner's Office (ICO).
Information Commissioner's Office
Links to other websites
Our website may contain links to websites or services operated by third parties.
People & Purpose is not responsible for the privacy practices of third-party websites. We recommend reviewing the relevant privacy information before providing personal information to another organisation.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or the way we process personal information.
The latest version will always be published on this website, and the date at the top of the policy will show when it was last updated.