Legal

Data Protection and Privacy Policy

How pqfinances collects, uses and protects personal data, including for business-to-business telephone and email contact.

1. Who I am

This website, pqfinances.co.uk, is operated by Phil Quinn FCCA, trading as pqfinances ("pqfinances", "I", "me"). I am the data controller for the personal data described in this policy.

Contact: phil@pqfinances.co.uk

2. What this policy covers

This policy covers (a) visitors to this website, and (b) business contacts whom I contact, or may contact, by telephone or email to introduce my fractional finance director services. It does not cover client financial data handled during a paid engagement, which is set out in each client's engagement letter.

3. The personal data I collect

Website visitors:

  • Name, email address and message, if you use the contact form.
  • Name, email address and chosen time slot, if you book a call through Calendly (Calendly handles this under its own privacy policy).
  • Pages viewed, general location and device type, if you accept analytics cookies.

Business contacts:

  • Name, job title or role (for example director), company name and company number.
  • Business telephone number and business email address.
  • Notes about our contact: the date, the outcome and any follow-up agreed.

I do not knowingly collect special category data (such as health information) or data about children.

4. Where I get your data from

  • You, directly (for example through the contact form, a call or an email).
  • Public sources, mainly the Companies House register (which lists company directors) and your company's own website.

5. How I use your data

  • To respond to your enquiries and arrange calls.
  • To contact business owners and directors by telephone, and where permitted by email, about fractional finance director services.
  • To keep a record of our contact so that I follow up when agreed and do not contact you again if you ask me not to.
  • To understand how the website is used, if you have accepted analytics cookies.

I do not sell your data, and I do not use it for automated decision-making or profiling.

6. Lawful basis

  • Business contacts and enquiries: legitimate interests (UK GDPR Article 6(1)(f)). My interest is finding businesses that may benefit from my services. I use only business contact details, I keep the data minimal, and I stop contacting anyone who objects. If you ask, I will explain how I balanced my interests against yours.
  • Analytics cookies: your consent, which you can withdraw at any time.

7. Telephone and email contact

  • I screen telephone numbers against the Telephone Preference Service (TPS) and the Corporate Telephone Preference Service (CTPS) and do not make marketing calls to registered numbers.
  • I keep my own do-not-contact list and do not contact anyone who has asked me to stop.
  • When I call, I say who I am and I do not hide my number. I will give you my contact details if you ask.
  • I send marketing emails only where the rules allow, and each one explains how to opt out.
  • I do not record sales calls. I take written notes only. If this changes, I will update this policy and tell you at the start of a call.

8. Who I share your data with

I use a small number of service providers (processors) who handle data on my behalf and under my instructions:

  • Google (Sheets, Workspace and Analytics) for storing contact records and website analytics.
  • CircleLoop for telephone calls.
  • Calendly for booking calls.
  • My website hosting provider.

Some of these providers may process data outside the UK. Where they do, this should be under appropriate safeguards, such as the UK International Data Transfer Agreement or an adequacy arrangement. I may also disclose data where the law requires it.

9. How long I keep your data

  • Website enquiries: only as long as needed to respond, plus a reasonable follow-up period.
  • Business contacts: up to 24 months after our last contact, unless we start working together, after which client records are kept as set out in the engagement letter.
  • Do-not-contact records: kept for as long as needed to make sure I do not contact you again. This is a minimal record (your name, company and number or email).
  • Analytics data: according to Google Analytics' standard retention settings.

10. Security

I use reasonable technical and organisational measures to protect personal data, including password-protected accounts and restricted access to contact records. No system is completely secure, but I will take action if a problem occurs, including notifying the ICO and affected people where the law requires.

11. Your rights

Under UK GDPR you have the right to:

  • be told what personal data I hold about you and receive a copy;
  • have inaccurate data corrected;
  • have your data erased, in certain circumstances;
  • restrict how I use your data, in certain circumstances;
  • object to my processing based on legitimate interests;
  • object at any time to direct marketing, which I will always honour;
  • receive your data in a portable format, where this applies.

To use any of these rights, or to be added to my do-not-contact list, email phil@pqfinances.co.uk or tell me on a call. I will respond within one month.

12. Cookies and analytics

This site uses Google Analytics to understand how visitors use it (pages viewed, general location, device type). This is non-essential and only runs if you click "Accept" on the cookie banner. You can decline, and the site will function normally. You can withdraw consent at any time by clearing your browser's local storage for this site.

13. Links to other websites

This site may link to other websites, including Calendly. I am not responsible for their privacy practices, so please read their policies.

14. Complaints

If you are unhappy with how I have handled your data, please contact me first so I can put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.

15. Changes to this policy

I may update this policy from time to time. The date at the top shows when it was last revised.

Last updated: October 2026