Privacy Notice
Last updated: September 2026
This notice explains how Pitta Consultancy Limited ("we", "us") collects and uses personal data when you visit this website or contact us, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Pitta Consultancy Limited is the data controller for the personal data described in this notice. We are a company registered in England & Wales (company number 15605943), with our registered office at 112 Morden Road, London, England, SW19 3BP.
For any privacy question or request, email enquiries@pittaconsultancy.com.
2. The personal data we collect
- Information you send us: when you email or call us, we receive your name, email address, phone number, job title, organisation and anything else you choose to include in your message.
- Client and business contact information: if we work together, we keep contact details and correspondence for the people we deal with at your organisation, along with the contract, invoicing and payment records needed to run the engagement.
- Technical data: when you visit the website, our hosting and security provider automatically processes technical information such as your IP address, browser type and the pages requested, so that the site can be delivered securely.
The website has no contact forms, user accounts, advertising or tracking cookies, and we do not use analytics that profile individual visitors. We do not collect special category data and ask that you do not send it to us.
3. How and why we use it
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and discussing a potential engagement | Legitimate interests (responding to people who contact us) or taking steps at your request before entering a contract |
| Delivering consultancy services, managing the client relationship and invoicing | Performance of a contract, or legitimate interests where the contract is with your organisation rather than you personally |
| Keeping accounting and tax records | Legal obligation |
| Running and securing the website | Legitimate interests (keeping the site available and protected from misuse) |
We do not sell your personal data, use it for automated decision-making, or send marketing emails unless you have asked to receive them.
4. Who we share it with
We only share personal data where necessary, with service providers acting on our instructions:
- Microsoft (Microsoft 365): email and business communications.
- Cloudflare: website hosting, domain name services and security.
- Google (Google Fonts): the website loads its fonts from Google's servers, which receive your IP address when a page is loaded.
- Our accountants and professional advisers, where needed to meet our legal and financial obligations.
We may also disclose information where required by law or to protect our legal rights.
5. International transfers
Some of our service providers, and some of our clients, are based outside the UK, including in the United States. Where personal data is transferred outside the UK, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the recipient is certified) or on the UK International Data Transfer Agreement or Addendum to protect it.
6. How long we keep it
- Enquiries that do not lead to an engagement: up to 2 years from our last contact.
- Client, contract and financial records: 6 years after the end of the financial year in which the engagement ends, as required for UK accounting and tax purposes.
- Technical website data: only as long as our hosting provider needs it for security and operation.
7. Your rights
You have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data;
- ask us to restrict or object to how we use it, including objecting to processing based on legitimate interests;
- receive your data in a portable format, where applicable.
To make a request, email enquiries@pittaconsultancy.com. We will respond within one month.
8. How we protect it
We use reputable providers with appropriate security measures, including encrypted connections (HTTPS) for this website, and we limit access to personal data to what is needed to run the business.
9. Complaints
If you have a concern, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, or 0303 123 1113.
10. Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed.
← Back to home