Privacy and cookies
PTR Consulting Ltd (“we”, “us”) runs ptrconsulting.com and the brands listed below. This page explains what personal data we collect when you use our websites, contact us or work with us, why we collect it, and the choices you have.
The short version
- We collect what we need to reply to you and to do the work you ask us to do.
- We tell you plainly when a third party is involved, and we name them.
- We never sell personal data, and we never share it with advertisers.
Who we are
PTR Consulting Ltd is a limited company registered in Northern Ireland, company number NI064282, with its registered office at 6th Floor, East Tower, Lanyon Plaza, 8 Lanyon Place, Belfast, BT1 3LP. We are registered with the Information Commissioner's Office under number ZC278269.
We are the data controller for the personal data described on this page. You can reach us at info@ptrconsulting.com, or by post at the address above.
We trade under several names. Each has its own website, and where a brand runs a product with its own privacy notice, that notice gives the detail for that product. The company behind all of them is PTR Consulting Ltd.
| Brand | What it is | Privacy notice |
|---|---|---|
| PTR Consulting | Transformation, regulatory and AI advisory for financial services firms, and sales and marketing services | This page |
| PinpointProof | Process intelligence and AI opportunity assessment for regulated firms | pinpointproof.com/privacy |
| Beacon by PinpointProof | Content and demand generation platform | app.beacon.pinpointproof.com/legal/privacy |
| OperAlpha | Portfolio cost-out and automation partner for private equity, growth and venture sponsors | This page until its own notice is published |
| The Lean Pivot | The book and its website | This page |
RegTick is operated by a separate company, Regtick Ltd, and is not covered by this page. Its privacy policy is at regtick.com/privacy-policy.
What we collect, and why
Enquiries by email or through the contact form
If you email us or use the form on our Get in touch page, we receive your name, email address, phone number if you give one, and whatever you choose to write, together with the page you sent it from and your browser type. We use it to reply and, where relevant, to follow up about our services. Our lawful basis is our legitimate interest in responding to people who contact us.
Messages sent through the form are stored in our own secure database, hosted in Ireland, where only our team can read them. Emails you send us are held in our mailbox.
Clients and prospective clients
When we work with you, or discuss working with you, we hold the business contact details of the people involved, the correspondence between us, proposals, contracts, meeting notes and invoices. We use these to deliver and account for the work. Our lawful bases are performance of a contract, legitimate interests in running our business, and legal obligation for accounting records.
Business development and marketing
We research and contact people at firms we may be able to help. For this we hold business contact details (name, job title, employer, work email, LinkedIn profile URL) and notes of our interactions. We gather these from you directly, from your public professional profile, from public company and regulatory sources, and from introductions made by partners. We do not buy marketing lists.
Our lawful basis is our legitimate interest in promoting our services to business contacts, balanced against your interests. Every marketing message we send carries an easy way to opt out, and replying “stop” works too. Some of this activity runs through Beacon, a platform we operate; its privacy notice describes it in full. Links in our emails and posts may pass through a tracked link that records when it was opened, the campaign it belonged to, a truncated IP address and the browser type, so we can see which content is useful.
Newsletter and content
If you subscribe through the “Stay in the loop” box on our website, we hold your email address and the date you subscribed. When we send updates, we may record whether our emails were opened and which links were followed so we can see what is useful. You can unsubscribe at any time from any email, or by emailing info@ptrconsulting.com. Our lawful basis is consent, which you give when you subscribe.
Articles on this website
The articles in our blog are drafted and approved in Beacon and published to this website from there. Reading an article does not record anything about you beyond the standard server logs described below.
Working with us
If you apply to work with us or we engage you as a contractor, we hold the information you give us and the records needed to engage and pay you. We keep unsuccessful application details for six months and then delete them.
Server logs
Our hosting provider keeps standard web server logs (IP address, pages requested, time of request) for security and capacity purposes. These are kept for a short period and are not used to profile visitors.
Cookies and embedded content
This website does not set any cookies. It has no sign-in, no advertising, no social media feeds or embedded videos, and we do not currently run analytics on it, so there is no cookie banner. If that changes, we will ask for your consent first and update this page before the change goes live.
| Set by | Name or type | Purpose | Duration |
|---|---|---|---|
| Google Fonts | None | The site loads its typefaces from Google's servers, so Google receives your IP address and browser details as part of serving the font files | Not a cookie |
| Your browser | None | Pages may be cached by your browser so they load faster on a return visit | Until your browser clears its cache |
You can block or delete cookies, and clear your cache, in your browser settings at any time.
Who we share data with
We use a small number of service providers to run our websites and our business. Each processes data on our instructions under a written contract, or under its own obligations as a controller where it provides a service directly to you.
| Provider | What they do for us | Where |
|---|---|---|
| Vercel | Hosts ptrconsulting.com and keeps its server logs | Served from a global network; our server functions run in London |
| Supabase | Stores contact form messages, newsletter sign-ups and the articles published on this site | Ireland |
| 20i (Stackmail) | Email for ptrconsulting.com addresses | United Kingdom |
| Google (Workspace, Calendar, Fonts) | Our email and documents; appointment booking; the typefaces on our sites | EU and United States |
| Microsoft 365 | Email and documents for some of our brands | EU and United States |
| Resend, Anthropic, OpenAI | Run parts of the Beacon platform; listed in full at app.beacon.pinpointproof.com/legal/subprocessors | Ireland, with some providers in the United States |
| Where we publish content or contact you through LinkedIn, LinkedIn processes that under its own terms | Ireland and United States | |
| Our accountants and professional advisers | Accounting, tax and legal advice | United Kingdom |
We will also disclose personal data where the law requires it, for example to a regulator or a court.
International transfers
Where a provider processes data outside the UK or the European Economic Area, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on the provider's certification under the UK Extension to the EU-US Data Privacy Framework. We will provide a copy of the relevant safeguard on request.
We do not sell personal data, we do not share it with advertisers, and we do not allow our AI providers to use your data to train their models.
How long we keep things
| Data | How long |
|---|---|
| Enquiries that do not lead to work | 24 months after our last exchange |
| Client records, contracts and correspondence | The life of the relationship, then 6 years for accounting and legal purposes |
| Prospect and marketing contact records | Reviewed yearly; archived and suppressed from further contact after 24 months with no response |
| Newsletter subscriptions | Until you unsubscribe; your address then stays on a suppression list so we do not email you again |
| Opt-out and suppression requests | Indefinitely, so we can honour them |
| Job and contractor applications (unsuccessful) | 6 months |
| Server logs | Up to 30 days |
When a period ends we delete the data or anonymise it so it no longer identifies you.
Your rights
Under UK and EU data protection law you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct anything that is inaccurate or incomplete;
- delete your personal data, where we have no overriding reason to keep it;
- restrict how we use it, or object to our use of it, including objecting to marketing at any time;
- provide the data you gave us in a portable format;
- withdraw consent, where consent was the basis we relied on.
To exercise any of these, email info@ptrconsulting.com. We respond within one month. We may ask you to confirm your identity before we act on a request.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, or to the supervisory authority in the EU country where you live or work. We would welcome the chance to put things right first.
Changes to this page
If we change how we handle personal data, for example by adding analytics or a new service provider, we update this page and the date at the top before the change goes live.
Questions
Happy to help with anything about your data. Email info@ptrconsulting.com, or write to PTR Consulting Ltd, 6th Floor, East Tower, Lanyon Plaza, 8 Lanyon Place, Belfast, BT1 3LP. You can also call us on +44 (0)79 610 41306.