Place Innovation Ltd Privacy Policy

This policy was last reviewed December 2025.

​

1. Introduction

Place Innovation Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. We handle personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

Place Innovation Ltd is the data controller for the purposes of this policy.
We are registered with the Information Commissioner’s Office (ICO) under registration number: ZA840434.

 

This Privacy Policy explains how we collect, use, store and protect personal data, and your rights in relation to that data.

 

2. Who this policy applies to

This policy applies to individuals who:

• Use our website

• Take part in our research or surveys

• Enquire about our services

• Are clients or prospective clients

• Work with us as associates or partners

 

3. The data we collect and how we use it

 

3.1 Website usage data

We may collect information about how you use our website, including:

• IP address

• Location (approximate)

• Browser type and version

• Operating system

• Referral source

• Pages viewed and navigation paths

• Time, frequency, and duration of visits

 

Purpose:

• To analyse and improve website performance

• To understand user behaviour

• To ensure website security

 

Legal basis: Legitimate interests

 

We use analytics services (e.g. Google Analytics). Data is aggregated and does not identify individuals directly.

 

3.2 Cookies

Our website uses cookies to improve user experience and analyse usage.

We use:

• Essential cookies (required for site function)

• Analytics cookies (to understand usage)

 

Non-essential cookies are only set with your consent via our cookie banner.You can control cookies through your browser settings.

 

Legal basis: Consent (for non-essential cookies)

 

3.3 Data submitted via forms or email

We may collect:

• Name

• Email address

• Organisation details

• Any information you choose to provide

Purpose:

• Responding to enquiries

• Providing services

• Sending relevant updates (where consent is given)

Legal basis:

• Legitimate interests

• Consent (where applicable)

 

3.4 Client and service data

We may process:

• Contact details

• Business information

• Correspondence

• Financial information (where required)

• Project-related data

We may also use publicly available information to support our work.

Purpose:

• Delivering services

• Managing client relationships

• Administration and record-keeping

Legal basis:

• Contract

• Legitimate interests

• Legal obligation

 

3.5 Research and survey data

We conduct surveys and research using:

• Online survey tools

• Telephone interviews

• Paper-based methods

 

Data collected may include opinions, demographic information, or other research inputs.

 

Important:

• Where we conduct research on behalf of a client, we may act as a data processor, and the client will be the data controller

• Where we conduct our own research, we act as the data controller

 

Participants will be informed of how their data is used at the point of collection.

 

Legal basis:

• Consent

• Legitimate interests (where appropriate)

 

3.6 Special category (sensitive) data

We only process sensitive personal data (e.g. health, ethnicity, political views) where:

• It is necessary for research purposes, and

• You have given explicit consent

 

4. Sharing your data

We may share personal data with:

• Associates and contractors working on our behalf

• Service providers (e.g. IT, cloud storage, analytics, survey platforms)

• Clients (where required for service delivery)

• Regulators or legal authorities where required

 

All third parties are required to respect the security of your data and process it lawfully.

 

5. International data transfers

Some of our service providers may process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations, or

• International Data Transfer Agreements (IDTAs)

 

6. Data retention

We retain personal data only as long as necessary. Typical retention periods include:

• Client and project data: up to 6 years after completion (for legal and tax purposes)

• Enquiries: up to 12 months

• Survey data: typically 12–24 months (unless anonymised sooner)

• Financial records: up to 6 years

Where data is no longer required, it is securely deleted or anonymised.

 

7. Data security

We implement appropriate technical and organisational measures to protect personal data, including:

• Secure storage systems

• Access controls

• Use of reputable third-party providers

 

8. Data breaches

We have procedures in place to deal with suspected data breaches. Where required, we will notify:

• The Information Commissioner’s Office

• Affected individuals

 

9. Your rights

Under UK data protection law, you have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion (right to erasure)

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time (where applicable)

To exercise your rights, contact us using the details below.

You also have the right to lodge a complaint with the Information Commissioner’s Office.

 

10. Providing third-party data

If you provide personal data about another person, you must ensure:

• You have their consent, and

• They have been informed of this Privacy Policy

 

11. Links to other websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

 

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

 

13. Contact details

If you have any questions about this Privacy Policy or your data, please contact:

Email: gina@placeinnovation.co.uk

​