Privacy Policy

Effective date: 12 October 2026

PNZ Advisory is the trading name of PNZ Advisory Limited, a company registered in England and Wales (company number 13285623), registered office Top Floor, Unit 2 Cinnamon Park, Crab Lane, Fearnhead, Warrington, WA2 0XP. We are the controller of the personal data described in this policy.

For any privacy questions or requests, contact us at contact@pnzadvisory.com.

1. What we collect and where it comes from

From you: details you give us when you contact us, book a call or become a client, including your name, job title, organisation, email address, phone number and the content of our correspondence.

From our website: usage data such as IP address, browser type and pages visited, collected through cookies and similar technologies. Section 3 explains how to manage these.

From public and business sources (business prospecting): the name, job title, employer, business email address, business phone number and professional profile URL of people in relevant roles at organisations that may need our services. We obtain these from:

- Company websites, annual and sustainability reports, and press releases
- Professional networking profiles
- Business contact data providers, including Apollo.io
- Public registers, including Environment Agency ESOS compliance data, Environment Agency civil penalties register, Science Based Targets initiative dashboard, Contracts Finder, Find a Tender, Companies House

2. Why we use it and our lawful basis

To respond to enquiries and deliver our services: performance of a contract, or our legitimate interests.

Business prospecting: we contact people, in their professional capacity, at organisations with a clear business need for sustainability and compliance services, such as an ESOS, SBTi or Carbon Reduction Plan requirement. Our lawful basis is legitimate interests: telling organisations about relevant services they are likely to need. We use only business contact details, contact only people whose role relates to our services, and every message includes a simple way to opt out.

Profiling: we score and rank prospects in HubSpot based on how relevant their organisation and role are to our services. This helps us decide who to contact first. It does not involve automated decisions with legal or similarly significant effects.

Electronic marketing: we email corporate addresses (companies, LLPs and public bodies) as permitted by the Privacy and Electronic Communications Regulations (PECR). We do not send unsolicited marketing email to sole traders or partnerships without their consent.

Running and improving our website: legitimate interests, or your consent where the law requires it for cookies.

3. Cookies

Our website uses cookies. Essential cookies are needed for the site to work. Non-essential cookies, such as analytics and HubSpot tracking, are only set once you accept them through the cookie banner. For full details of the cookies we use, see https://pnzadvisory.com/cookie-policy.

4. Who we share it with

We share personal data only with service providers acting on our instructions, including:

- HubSpot (website, CRM and meeting scheduling)

- Apollo.io (contact data and email delivery)

- Microsoft (email)

- Render (hosting of our internal tools)

Some of these providers are based in the United States. Where we transfer data outside the UK, we rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or the International Data Transfer Agreement. We do not sell personal data.

5. How long we keep it

Prospecting data is kept for up to 24 months from our last contact and then deleted, unless you become a client. If you opt out, we keep only the minimum needed (your email address and the date of your opt-out) on a suppression list, so that we do not contact you again. Client records are kept for six years after the engagement ends.

6. Where we got your details, and your right to opt out

If we contact you and your details came from a third-party source, we will tell you where we got them. Every message we send includes a link to this policy and a way to opt out. Our emails explain that you can reply “unsubscribe” at any time.

7. Your rights

You have the right to:

- ask us what personal data we hold about you and receive a copy

- ask us to correct data that is inaccurate or incomplete

- ask us to delete your data or restrict how we use it

- receive your data in a portable format, where this applies

- object to our use of your data at any time, including for direct marketing. We will always honour an objection to direct marketing

- withdraw your consent, where we rely on consent

To exercise any of these rights, email contact@pnzadvisory.com, or reply “unsubscribe” to any email from us. We respond within one month.

You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

8. Security

We use appropriate technical and organisational measures to protect personal data, including access controls on the systems that hold it.

9. Changes to this policy

We review this policy at least once a year. We will post any changes on this page with a new effective date.