1. Who we are
Playbook Advisory Group Limited ("Playbook", "we", "us", or "our") is a company registered in England and Wales. We provide senior-led, sponsor-side advisory services for capital programme governance.
Our registered office and principal place of business is at 5 North Hall, Spencer Yard, Spencer Street, Leamington Spa, Warwickshire, CV31 3SY.
We are the data controller for the personal data described in this policy. If you have any questions about how we handle your data, please contact us at hello@playbook-group.co.uk.
2. What this policy covers
This policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. It applies to personal data collected through this website (playbook-group.co.uk) and through our direct business correspondence and engagement activities.
We are committed to processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
3. Data we collect and how we collect it
3.1 Information you provide directly
When you contact us through this website or by email, we may collect:
- Your name and job title
- Your organisation name
- Your business email address and telephone number
- The content of your enquiry or message
3.2 Information collected automatically
When you visit this website and have given consent via our cookie banner, we use Google Analytics 4 to collect anonymised usage data including pages visited, approximate location (country/region only), device and browser type, and how you arrived at the site. This data is used to understand how the website is used and to improve its content. IP addresses are not stored. No advertising cookies are used. Without your consent, no analytics data is collected. You can withdraw consent at any time via the "Cookie preferences" link in the footer.
3.3 Information from business correspondence
In the course of our advisory work, we may collect professional contact information and correspondence from individuals at client organisations, prospective clients, and professional contacts. This data is typically limited to business contact details and professional context.
4. How we use your data
We use the personal data we collect for the following purposes:
- Responding to enquiries: to respond to messages submitted through our contact form or sent to us directly
- Client engagement: to manage our advisory engagements, including scoping discussions, project delivery, and ongoing correspondence
- Business development: to follow up on professional introductions and maintain relationships with current and prospective clients
- Improving our website: to understand how our website is used and to improve its performance and content
- Legal and compliance obligations: to comply with any legal or regulatory requirements applicable to our business
5. Lawful basis for processing
We rely on the following lawful bases under UK GDPR:
- Legitimate interests (Article 6(1)(f)): for responding to enquiries, maintaining professional relationships, and conducting business development. We have assessed that our legitimate interests do not override your rights and freedoms.
- Contract (Article 6(1)(b)): where processing is necessary for the performance of a contract with you or your organisation, or to take steps at your request before entering into a contract.
- Legal obligation (Article 6(1)(c)): where we are required to process data to comply with a legal obligation.
6. Data sharing
We do not sell, rent, or trade your personal data. We may share your data only in the following limited circumstances:
- Service providers: third-party providers who process data on our behalf (such as email delivery services), bound by data processing agreements and permitted to use your data only for the services they provide to us
- Professional advisers: our lawyers, accountants, and insurers where necessary for the conduct of our business
- Legal requirements: where we are required to disclose data by law, court order, or regulatory authority
- Google LLC (Google Analytics 4): anonymised usage data is processed by Google LLC under the EU–US Data Privacy Framework. We have configured Google Analytics to disable Google signals, disable data sharing with Google products, and use device-based reporting only.
7. Data retention
We retain personal data only for as long as is necessary for the purposes set out in this policy, or as required by law. In practice:
- Enquiry data from the contact form is retained for up to 24 months from the date of last contact unless a client relationship develops
- Data relating to active client engagements is retained for the duration of the engagement and for a period of seven years thereafter, in line with standard professional practice
- Google Analytics data is retained for 14 months and is anonymised at the point of collection. Aggregated reports may be retained indefinitely.
8. International transfers
We do not routinely transfer personal data outside the United Kingdom. Where any transfer does occur, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Google Analytics data may be processed in the United States by Google LLC. This transfer is covered by Google LLC's certification under the EU–US Data Privacy Framework, providing an adequate level of protection under UK GDPR.
9. Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access: to request a copy of the personal data we hold about you
- Right to rectification: to request correction of inaccurate or incomplete data
- Right to erasure: to request deletion of your data in certain circumstances
- Right to restriction: to request that we limit the processing of your data in certain circumstances
- Right to object: to object to processing based on legitimate interests
- Right to data portability: to receive your data in a structured, machine-readable format in certain circumstances
To exercise any of these rights, please contact us at hello@playbook-group.co.uk. We will respond to verified requests within one calendar month.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
10. Website security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. However, no transmission over the internet is entirely secure and we cannot guarantee the security of data transmitted to our website.
11. Links to other websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.
12. Cookies
A cookie is a small text file that a website stores on your device. We use cookies sparingly and only where necessary or where you have given consent.
12.1 Strictly necessary cookies
These are always active and do not require consent. They store your cookie preferences so we don't ask again on every page.
| Name | Purpose | Duration |
|---|---|---|
playbook_consent_v1 | Stores your cookie preferences | 12 months |
This is stored in your browser's local storage, not as a cookie, but is functionally equivalent. It is listed here for transparency.
12.2 Analytics cookies
These are only set after you click Accept on the cookie banner. They allow us to understand how the site is used so we can improve it.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Distinguishes unique visitors | 2 years | |
_ga_<container-id> | Maintains session state | 2 years |
You can change or withdraw your consent at any time using the Cookie preferences link in the website footer. Withdrawing consent will not delete cookies already stored — you can clear those via your browser settings.
13. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.
14. Contact us
If you have any questions about this privacy policy or about how we handle your personal data, please contact us:
Playbook Advisory Group Limited
5 North Hall, Spencer Yard
Spencer Street, Leamington Spa
Warwickshire, CV31 3SY
hello@playbook-group.co.uk