top of page

Privacy Notice

1. Introduction

Launchpad Advisory Ltd (“Launchpad”, “we”, “our” or “us”) is committed to protecting your privacy and handling personal information fairly, lawfully and transparently.

This Privacy Notice explains how we collect, use, store and protect personal information when you:

  • visit our website;

  • contact us;

  • receive communications from us;

  • engage us to provide advisory services; or

  • otherwise interact with Launchpad.

2. Who we are

Launchpad Advisory Ltd provides strategic finance, commercial and business advisory services.

 

Our services include:

​

  • fractional CFO and Finance Director support;

  • interim finance leadership;

  • strategic finance;

  • business performance improvement;

  • commercial and operational advisory;

  • financial due diligence; and

  • apprenticeship provider advisory.

​

Website: www.launchpadadvisory.co.uk
Email: info@launchpadadvisory.co.uk

​

For the purposes of UK data protection law, Launchpad Advisory Ltd is normally the data controller responsible for deciding how and why your personal information is processed.

​

In some client engagements, we may process personal information solely on a client’s documented instructions. In those circumstances, the client will normally be the controller and Launchpad will act as a processor.

3. Personal information we collect

The information we collect depends on how you interact with us.

 

Contact and identity information

 

This may include:

  • your name;

  • job title;

  • employer or organisation;

  • business address;

  • email address;

  • telephone number; and

  • professional or social-media profile information.

 

Enquiry and correspondence information

 

This may include:

  • information submitted through our website;

  • emails and other correspondence;

  • meeting notes;

  • records of telephone or video calls; and

  • information relating to proposals or potential engagements.

 

Client and business information

 

Where you engage us, this may include information concerning:

  • your organisation and employees;

  • financial and management information;

  • budgets, forecasts and cash flow;

  • strategic objectives;

  • operational performance;

  • funding arrangements;

  • contracts;

  • board and shareholder matters;

  • business plans;

  • due-diligence materials; and

  • other commercially sensitive information supplied during an engagement.

 

Some business documents may contain personal information about directors, employees, customers, suppliers or other individuals.

​

Website and technical information

 

When you use our website, we may collect:

  • IP address;

  • browser and device information;

  • approximate location derived from your IP address;

  • pages viewed;

  • time spent on the website;

  • links selected;

  • referral source; and

  • cookie and analytics information.

​

4. How we obtain personal information

We may collect information:

​

  • directly from you;

  • from your organisation or colleagues;

  • through our website and contact forms;

  • through meetings, calls and correspondence;

  • from publicly available sources such as Companies House, company websites and professional networks;

  • from professional advisers, recruiters, referral partners or business contacts; and

  • through website analytics and similar technologies.

 

Where a client supplies personal information relating to another person, the client is responsible for ensuring it has the authority and lawful basis to provide that information to us.

​

5. How we use personal information

We may use personal information to:

​

  • respond to enquiries;

  • arrange meetings and calls;

  • assess whether we can assist you;

  • prepare and discuss proposals;

  • enter into and administer contracts;

  • provide advisory and consultancy services;

  • communicate with clients and business contacts;

  • manage invoicing, payments and accounting;

  • maintain records of our work;

  • manage professional, legal and regulatory risks;

  • protect confidential information;

  • prevent fraud, misuse and security incidents;

  • improve our website, services and communications;

  • establish, exercise or defend legal claims; and

  • comply with legal, tax, accounting and regulatory requirements.

 

We may also send relevant business updates, insights or information about our services where permitted by law. You can ask us to stop sending marketing communications at any time.

6. Our lawful bases

We rely on one or more of the following lawful bases:

​

Contract

 

Where processing is necessary to:

  • take steps at your request before entering into a contract; or

  • perform a contract with you.

 

Legitimate interests

 

We may rely on legitimate interests to:

  • respond to business enquiries;

  • manage client and professional relationships;

  • develop and promote our services;

  • maintain appropriate business records;

  • protect our systems and confidential information;

  • manage disputes and legal claims; and

  • improve our website and business operations.

 

Where we rely on legitimate interests, we consider whether our interests are proportionate and whether your rights override them.

 

Legal obligation

 

We may process information where necessary to meet legal, tax, accounting, regulatory or professional obligations.

 

Consent

We may rely on consent where required, including for certain cookies or marketing activities. You may withdraw consent at any time, although this will not affect processing already carried out lawfully.

​

7. Confidential and commercially sensitive information

We recognise that clients may provide highly confidential financial, strategic, operational and commercial information.

 

We treat such information as confidential and use it only for:

  • delivering the agreed services;

  • administering the engagement;

  • managing legal, professional and regulatory obligations; and

  • protecting Launchpad’s legitimate business interests.

 

Access is restricted to people and service providers who need the information for an authorised purpose.

Confidentiality obligations may also be included in our engagement letters, contracts or non-disclosure agreements.

8. Ownership and control of client information

Clients retain ownership of their business records, documents and data.

​

Where Launchpad processes information on a client’s behalf:

  • we do not acquire ownership of that information;

  • we use it only for agreed purposes;

  • we apply appropriate confidentiality and security measures; and

  • we return, retain or delete it in accordance with the engagement terms and applicable legal requirements.

 

Nothing in this Privacy Notice transfers ownership of client information to Launchpad.

9. Who we share information with

We do not sell personal information.

 

We may share information where necessary with:

  • technology and cloud-service providers;

  • website hosting and support providers;

  • accountants, auditors, lawyers and other professional advisers;

  • insurers;

  • contractors or specialist advisers supporting an engagement;

  • payment, banking or accounting providers;

  • government bodies, courts, regulators or law-enforcement agencies where legally required;

  • potential purchasers, investors or advisers involved in a corporate transaction; and

  • other parties where you have authorised us to do so.

 

Current technology providers may include:

  • Microsoft 365;

  • Wix;

  • Google services;

  • Microsoft Clarity; and

  • other business systems introduced from time to time.

 

Where applicable, these organisations act as data processors and are required to process personal information only in accordance with our instructions and contractual requirements.

 

Some providers may act as independent controllers for limited purposes, such as account security, fraud prevention or their own legal obligations.

10. International transfers

Some of our technology providers may process or store personal information outside the United Kingdom.

 

Where this results in a restricted transfer under UK data protection law, we take steps to ensure that an appropriate transfer mechanism is in place. This may include:

​

  • UK adequacy regulations;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to approved contractual clauses; or

  • another permitted safeguard or exception.

 

UK data protection rules require restricted transfers to be supported by adequacy regulations, appropriate safeguards or a permitted exception.

11. Data security

We use appropriate technical and organisational measures designed to protect personal information against:

​

  • unauthorised access;

  • loss;

  • misuse;

  • alteration;

  • disclosure; and

  • accidental destruction.

 

Measures may include:

  • secure cloud-based systems;

  • access controls;

  • multifactor authentication;

  • password protection;

  • device security;

  • encrypted communications where appropriate;

  • restricted access to confidential information;

  • backups and software updates; and

  • contractual confidentiality requirements.

 

No system is completely secure, but we review our controls and take proportionate steps to manage risk.

12. Retention

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, tax, accounting, contractual and professional requirements.

 

Our general retention approach is:

  • Unsuccessful enquiries and proposals: normally up to 24 months after the last meaningful contact.

  • Marketing records: until you unsubscribe, object or the information is no longer relevant, subject to retaining a limited suppression record where necessary.

  • Client engagement and financial records: normally six years after the end of the engagement or the end of the relevant financial period.

  • Website analytics data: according to the retention settings applied within the relevant analytics platform.

  • Legal claims or disputes: for as long as reasonably necessary to establish, exercise or defend the claim.

 

We may retain information for longer where:

  • required by law;

  • needed for an ongoing dispute, investigation or claim;

  • required by a contractual or regulatory obligation; or

  • the information has been securely anonymised.

 

The UK GDPR does not impose a universal retention period. Organisations must set and justify periods according to the purpose for which the information is held.

13. Your rights

Depending on the circumstances, you may have the right to:

​

  • request access to your personal information;

  • ask us to correct inaccurate or incomplete information;

  • request erasure;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • object to direct marketing;

  • request transfer of certain information;

  • withdraw consent where consent is relied upon; and

  • complain to the Information Commissioner’s Office.

 

These rights are subject to legal conditions and exemptions.

 

To exercise a right, contact: info@launchpadadvisory.co.uk

 

We may need to verify your identity before responding.

14. Marketing communications

We may contact business representatives with information about services, insights or opportunities that we reasonably believe may be relevant.

 

Where required, we will obtain consent. In other cases, we may rely on legitimate interests, subject to applicable direct-marketing and electronic-communications rules.

 

You can opt out at any time by:

  • using an unsubscribe option where provided; or

  • emailing info@launchpadadvisory.co.uk.

 

We may keep a minimal suppression record to ensure that we respect your request.

15. Cookies and analytics

Our website may use:

  • essential cookies required for the website to function;

  • security and preference cookies;

  • analytics cookies; and

  • similar technologies used to understand website performance and visitor behaviour.

 

Services may include Wix analytics, Google services and Microsoft Clarity.

Where consent is legally required, non-essential cookies should not be activated until you have provided that consent.

 

Further details should be included in a separate Cookie Notice and cookie-preference tool.

 

Google Search Console itself is principally a website-performance tool and does not operate in the same way as visitor-level analytics. It should not be described as a cookie-based analytics provider unless a particular Google analytics product is also installed.

16. Links to other websites

Our website may contain links to third-party websites.

 

We are not responsible for the privacy practices, security or content of external websites. You should review their privacy notices before providing personal information.

17. Complaints

Please contact us first if you have concerns about how we use your information.

 

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Website: ico.org.uk
Telephone: 0303 123 1113

18. Changes to this notice

We may update this Privacy Notice to reflect changes in our services, systems or legal obligations.

The latest version will be published on our website with an updated effective date.

bottom of page