Last updated: 22/10/2026
This Privacy Policy applies between you, the user of this website and/or our services (“you”), and Underpin Change & Growth Consultants, of Gloucester House, 23a London Rd, Peterborough PE2 8AN (Company No. 11930188). Our telephone number is 07399004175 and our email address is lewis@underpinconsultants.com (“we”, “us” or “our”).
We respect your privacy and are committed to protecting your personal data. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
In this Privacy Policy:
“Data” means collectively all information that you submit to us or which we collect about you.
“Personal Data” means any data relating to an identified or identifiable natural person.
“Cookies” means small text files placed on your computer or device by our website.
“Data Protection Laws” means the UK GDPR and the Data Protection Act 2018 and any other applicable UK legislation relating to the processing of personal data.
“Website” means the website you are currently using (including any sub-domains) or any forms, portals or other electronic communications we provide.
Unless the context otherwise requires, words in the singular include the plural and vice-versa; reference to one gender includes all genders; headings do not affect interpretation.
For the purposes of the Data Protection Laws, we are the “data controller”. This means that we decide how and why your personal data is processed.
If you have any questions about this policy, or how we handle your data, please contact us at:
Underpin Change & Growth Consultants
Gloucester House, 23a London Rd, Peterborough PE2 8AN
Tel: 07399004175
Email: lewis@underpinconsultants.com
We may collect and process the following data about you in connection with your use of our Website and/or our services:
Identity Data: e.g., first name, last name, job title.
Contact Data: e.g., address, telephone number, email address.
Financial and Transaction Data: e.g., payment details, billing address (where applicable).
Technical/Usage Data: e.g., IP address, browser type & version, time zone, cookies data, how you use our website and services.
Marketing & Communications Data: your preferences in receiving marketing from us and your communication preferences.
We will collect data in a number of ways, including:
Directly from you: e.g., when you fill in forms on our Website, contact us by telephone or email, subscribe to our communications, request a quote or engage our services.
Automatically: as you use our Website, we may log technical/usage data via cookies and other analytics tools.
From third parties: in limited cases where necessary, e.g., business partners, service providers, LinkedIn, or if you give permission for us to access information via other platforms.
We will only use your data when the law allows us to. Most commonly we will use your data in the following circumstances:
Where we need to perform a contract we are about to enter into or have entered into with you.
Where it is necessary for our legitimate interests (for example: running our business, improving our services, marketing, fraud prevention), provided your rights and interests do not override those interests.
Where we need to comply with a legal or regulatory obligation.
Specifically, we may use your data:
To provide you with our services and to manage our relationship with you.
To respond to your enquiries and requests.
To send you marketing communications (if you have opted-in) about services we feel may interest you.
To improve our Website, services and operations (including analytics, testing and user feedback).
To comply with our legal, regulatory and internal policy obligations.
Where we rely on your consent (for example for certain marketing communications or some cookies), you have the right to withdraw your consent at any time.
We may disclose your personal data to:
Our service providers, contractors or agents who help with our business operations (for example: IT services, analytics providers, marketing platforms), where necessary for the provision of services to you.
Professional advisers such as accountants, lawyers or auditors.
Regulators, law enforcement or other public authorities, where we are legally required to do so.
A prospective buyer or new owner of our business (or part of it) if we sell or restructure.
We will ensure that any third parties to whom we transfer your personal data are required to protect it to the same standard as we do.
As part of operating our business, your personal data may be transferred to recipients located outside of the UK or EEA. Whenever we undertake such transfers we will take steps to ensure that your personal data is treated securely and in accordance with applicable Data Protection Laws (for example via use of standard contractual clauses, ensuring the country has adequate protections or other appropriate safeguards).
We have implemented appropriate technical and organisational measures to safeguard your personal data and to keep it secure, including:
restricting access to your personal data to those employees, agents and other third parties who have a business need to know;
storing personal data on secure servers;
using encryption or other industry-standard security measures where appropriate;
ensuring our staff are trained and aware of their responsibilities.
However, no data transmission over the internet or method of electronic storage is 100% secure and we cannot guarantee absolute security. We therefore ask that you take care when transmitting your data to us via the internet.
We will keep your personal data only for as long as is necessary for the purposes for which we collected it, including any statutory or business-need retention times. After this period, your personal data will be deleted or anonymised. If you no longer want us to use your personal data, you can ask us to delete it (see section 12).
Under the Data Protection Laws you have certain rights in relation to your personal data. These include:
The right to access: request copies of the personal data we hold about you.
The right to rectification: ask us to correct inaccurate or incomplete data.
The right to erasure: request the deletion of your personal data.
The right to restrict or object to our processing of your personal data.
The right to data portability: request the transfer of your data to another organisation, where applicable.
Where processing is based on your consent, you have the right to withdraw that consent at any time.
If you wish to exercise any of these rights, please contact us at: lewis@underpinconsultants.com
You also have the right to lodge a complaint with the ICO if you believe processing of your personal data breaches data protection laws (see section 13).
Our Website uses cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our website and allows us to improve it.
By continuing to browse the Website, you are agreeing to our use of cookies. You may block cookies by activating the setting on your browser which allows you to refuse the setting of all or some cookies.
Please note that if you block cookies, some parts of our Website may not function correctly.
We typically use the following types of cookies:
Strictly necessary cookies: required for the operation of our Website (e.g., enabling log-in, forms, secure areas).
Analytical/performance cookies: to recognise and count the number of visitors and to understand how visitors use our Website (for example via Google Analytics or similar).
We may update the cookie schedule from time to time; the cookies we use will be listed on our Website.
Our Website may contain links to other websites which are operated by third parties. We do not have control over the privacy practices or content of those websites and the policy above does not apply to them. We recommend you review the privacy notices of any such websites you visit.
We may update this policy from time to time by posting a new version on our Website. You should check this page occasionally to ensure you are happy with any changes. If we make material changes, we will make it clear via our Website or by other means.
This Privacy Policy, its subject matter and its formation, are governed by the laws of England and Wales. We both submit to the exclusive jurisdiction of the courts of England and Wales.
Before a first meeting, we may invite you to answer six short questions through our “Before we meet” page. This section explains how that data is handled.
What we collect. Your typed answers, your email address, and, only if you choose to record, a voice recording of your spoken answers. Nothing is stored on our servers until you actively choose to share your answers with us; until then they exist only in your browser.
Why we collect it. Solely to prepare for and arrange a first conversation with you. We do not use these answers for marketing and we do not share them with anyone else.
Lawful basis. Your consent, given by ticking the consent box when you share your answers (and, for recordings, by a separate prompt before recording starts). You can withdraw consent at any time by emailing lewis@underpinconsultants.com, and we will delete your answers and any recording.
How long we keep it. Answers you share are kept for 12 months. Recordings that are never shared with us, and answers older than 12 months, are deleted at our next review of stored data, which we carry out at least once a year. We delete yours sooner if you ask.
Where it lives and who processes it. Answers and recordings are stored with Supabase (an EU-hosted database and storage, in Ireland). The page itself is served by Netlify, and we receive a notification of each submission via Resend (email delivery). These providers act as our processors and do not use your data for their own purposes.
Your rights. As set out in section 11 above, including access, correction and erasure. Contact lewis@underpinconsultants.com.
Our positioning workbook (workbook.underpinconsultants.com) lets you work through Know what your business is for online. This section explains how your answers are handled.
What we collect. Your answers to the workbook questions, your email address, and, if you choose to give them, your first name and business name. While you work, your answers are saved only in your own browser. Nothing reaches our servers until you choose to save your workbook or send it to us.
Why we collect it. To let you come back to your workbook from any device, and so that Lewis can read your answers and contact you about them, including arranging a workbook review if you ask for one. We don’t share your answers with anyone else.
Our newsletter. We only add you to our weekly newsletter if you tick the separate newsletter box. You can unsubscribe at the bottom of any newsletter.
Lawful basis. Your consent, given by ticking the consent box when you save or send your workbook, and a separate consent for the newsletter. You can withdraw either at any time by emailing lewis@underpinconsultants.com, and we will delete your workbook.
How long we keep it. We keep your workbook for 12 months after you last use it, then delete it at our next review of stored data, which we carry out at least once a year. We delete it sooner if you ask.
Your link. When you save, you get a private link to your workbook. Anyone who has the link can open it, so please keep it to yourself.
Emails we send you. When you save your workbook, we email you your link. When you send us your answers, we email you a copy, with a link to book a workbook review. If you save your workbook but don’t send it, we send one reminder three days later. We don’t send you anything else unless you tick the newsletter box.
Where it lives and who processes it. Your answers are stored with Supabase (an EU-hosted database, in Ireland). The workbook is served by Netlify. Resend delivers the emails: the ones we send you, and the notification we receive when a workbook is saved or sent. Cloudflare Turnstile checks that a person, not a bot, is saving the workbook. We use Google Analytics to count visits and how far people get, without analytics cookies. These providers act as our processors and do not use your data for their own purposes.
Paid workbook reviews. If you book a workbook review, the booking is made through a Google Calendar booking page and the payment is taken by Stripe. They collect your name, email address and payment details to make the booking and take the payment. We see your name, email address and the booking. We never see your card details.
Your rights. As set out in section 11 above, including access, correction and erasure. Contact lewis@underpinconsultants.com.
Contact us
If you have any questions about this policy or how we handle your personal data, please contact:
Underpin Change & Growth Consultants
Gloucester House, 23a London Rd, Peterborough PE2 8AN
Tel: 07399004175
Email: lewis@underpinconsultants.com
