Privacy Policy
What we collect, why, and what you can do about it. In plain English, no guff.
Last updated: 28 July 2026.
Who we are
Punk Consulting Ltd is a company registered in England & Wales, company number 17306665, registered office at 9 Lyndhurst Road, Reigate, RH2 8JW. We are registered with the Information Commissioner's Office (ICO) as a data controller, registration reference ZC206384. You can check this at any time on the ICO's public register at ico.org.uk.
This policy covers data we collect through this website and in the course of running our business (enquiries, proposals, invoicing). It does not cover personal data we may handle on behalf of a client during a paid engagement, that is covered separately in our Terms of Business, where Punk acts as a data processor, not a controller, and never retains client data beyond the engagement.
What we collect
We only collect what you give us directly. There is no tracking or analytics running on this site, and no cookies beyond what your browser needs to load the page.
- Contact form: name, company, email address, and whatever you tell us in the message field, submitted via our contact page.
- Direct email: anything you send to hello@punkconsulting.co.uk or in the course of a conversation, discovery call, or engagement.
Why we collect it
Solely to respond to your enquiry, arrange a discovery session, and, if we work together, to deliver and administer that engagement (proposals, contracts, invoicing). Our lawful basis is legitimate interest (responding to enquiries you've initiated) or, once you become a client, performance of a contract.
Who else sees it
Contact form submissions are processed by Web3Forms, a third-party form-delivery service, purely to route your message to our inbox. We don't share your details with anyone else, sell them, or use them for marketing you haven't asked for.
How long we keep it
Enquiries that don't turn into work are kept for a reasonable period in case you get back in touch, then deleted. Records relating to actual client engagements (contracts, invoices) are kept as long as UK tax and company law requires. Any client personal data we've processed as part of delivering work is purged once the engagement closes, not retained indefinitely.
Your rights
Under UK GDPR you can ask us what we hold on you, ask us to correct or delete it, or object to how we're using it. Email hello@punkconsulting.co.uk and we'll sort it out directly. If you're not happy with our response, you can complain to the ICO at ico.org.uk.
Questions
If any of this is unclear, just ask. Email hello@punkconsulting.co.uk.