Legal - Privacy policy
This policy explains how Assist IQ handles personal information when you visit this website, contact us or discuss a project. We collect only information needed to respond, provide services, operate the site and meet legal obligations. This is a working UK GDPR privacy notice and must be reviewed before reliance or production launch.
01
Important review notice.
Draft for legal review before relying on it. The final notice must be checked against the live enquiry form, booking system, analytics configuration, CRM, email provider, data processors, retention schedule and any international data transfers in use at launch.
The controller is PCMG Consulting Services Ltd, trading as Assist IQ. Company number SC852814. Registered contact address: 5 St Murdochs Crescent, Arbroath, Angus, DD11 5DA. Privacy enquiries can be sent to hello@assistiq.co.uk.
02
Information we may collect.
We may collect your name, business name, job title, email address, telephone number and the information you choose to include in an enquiry. If you become a client, we may also process project records, contracts, invoices, meeting notes, system-access information and the operational data required to deliver the agreed service.
The website and hosting provider may process technical information such as IP address, browser type, device information, referring page, requested pages and security logs. Non-essential analytics information should only be collected after the required consent has been obtained.
Please do not send special-category, confidential client or security-sensitive information through the general contact route unless we have agreed a secure method with you.
03
Why we use it.
| Purpose | Typical lawful basis |
|---|---|
| Replying to an enquiry and discussing requested work | Legitimate interests or steps at your request before a contract |
| Providing, administering and improving an agreed service | Contract and legitimate interests |
| Invoicing, accounting and legal record keeping | Contract and legal obligation |
| Protecting the website, systems and users | Legitimate interests and legal obligation where applicable |
| Sending marketing to business contacts | Legitimate interests or consent, depending on the recipient and channel |
| Using non-essential analytics or advertising cookies | Consent where required by PECR |
Where we rely on legitimate interests, we consider the business need, necessity and effect on your rights. You can object to processing based on legitimate interests.
04
Sharing, processors and international access.
We may use vetted suppliers for website hosting, email, forms, booking, CRM, automation, accounting, file storage and AI services. They process information only for the relevant service and under appropriate contractual terms. The final production version of this policy should name or categorise the suppliers actually enabled.
We do not sell personal information. We may disclose information where required by law, to protect legal rights, during a properly managed business transaction or to professional advisers who owe duties of confidentiality.
Some suppliers may process information outside the UK. Where this happens, we will use an applicable UK adequacy decision or appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum, together with any required risk assessment.
05
Retention and security.
We keep personal information only for as long as it is needed for the purpose collected, contractual records, dispute handling and legal or tax obligations. Enquiries that do not progress should be deleted or anonymised under the final retention schedule. Client and financial records may need to be retained for longer legal periods.
We use proportionate organisational and technical measures, including access control, supplier review, secure authentication and restricted sharing. No internet service can guarantee absolute security. If a personal-data breach creates a risk to people, we will assess and report it as required.
06
Your rights.
Depending on the circumstances, you may have rights to access, correct or erase your information; restrict or object to processing; receive portable information; and withdraw consent at any time. Withdrawing consent does not affect earlier lawful processing.
Contact hello@assistiq.co.uk to exercise a right. We may need to verify your identity. You can also complain to the Information Commissioner's Office at ico.org.uk, although we would welcome the opportunity to resolve the issue first.
07
Updates.
This draft was last updated on 16 July 2026. The live policy should be reviewed whenever the site's forms, analytics, CRM, AI providers or service delivery change.
See also our cookie policy and terms.