Legal
Privacy Policy
1. Who We Are
This website is operated by Genesis Performance Advisory Ltd, a company registered in England and Wales (company number 17364599), whose registered office is at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. We provide AI-enabled business performance advisory services to small and medium-sized enterprises.
For the purposes of UK data protection law, Genesis Performance Advisory Ltd is the data controller of personal data collected through this website.
Contact: [email protected]
2. What Personal Data We Collect
We collect personal data when you voluntarily submit our contact form. The data collected is:
- Your title and name
- Your email address
- Your business name
- Your role, business-size band, country or main market, industry and service interest, if you choose to provide them
- How you heard about Genesis and whether you were referred, if you choose to provide them
- The business challenge or message you submit, if provided
- Campaign attribution attached to the page link, such as UTM values and a Genesis content ID
The role, business-size, country or market, industry, service-interest, source, referral-status and challenge fields are optional.
We do not collect sensitive personal data and we do not collect data from children under 18.
3. How We Use Your Data
We use your personal data to respond to your enquiry and, where relevant, to discuss how our services might help your business. We may also use the source and campaign information to understand which Genesis content led to an enquiry and to evaluate our marketing tests in aggregate. We do not use your data for automated decision-making or profiling.
4. Legal Basis for Processing
Our legal basis for processing your personal data is legitimate interests (Article 6(1)(f) UK GDPR): specifically, our legitimate interest in responding to business enquiries made to us. Where you have explicitly requested contact, processing is also based on contract performance or pre-contractual steps.
5. Third-Party Processors
We use the following third-party services which may process your personal data on our behalf:
- Web3Forms: processes contact form submissions on our behalf and delivers them to our inbox. Its current privacy policy states that form-submission data may be retained for a maximum of three years unless a shorter plan limit applies or the data is deleted earlier. See web3forms.com/privacy.
- Google Analytics: we use Google Analytics 4 to understand how visitors use our website. This service uses cookies and collects anonymised usage data. It does not identify you personally. Analytics cookies are only placed after you accept cookies. See policies.google.com/privacy.
- Hostinger: our website host, operating servers in the EU. Hostinger processes server-level data (IP addresses, access logs) as part of standard hosting operations.
- Cloudflare: provides DNS and traffic security for our domain. Cloudflare may process IP addresses and request headers as part of its service.
6. Cookies
We use two types of cookies:
- Functional cookies: store your cookie consent preference. Strictly necessary; no consent required.
- Analytics cookies: set by Google Analytics to help us understand site usage. Only placed after you accept cookies. You can withdraw consent by clearing your browser cookies.
7. Data Retention
Genesis retains the copy of personal data received through the contact form for up to 12 months from the date of submission, or for as long as necessary to manage your enquiry or any resulting engagement, after which it is securely deleted. Web3Forms applies its own processor-side retention limit described in section 5. We will delete processor-held submission data earlier where the service controls allow and it is no longer needed.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: ask us to correct inaccurate or incomplete data.
- Right to erasure: ask us to delete your personal data where there is no compelling reason to continue processing it.
- Right to restriction: ask us to restrict processing in certain circumstances.
- Right to data portability: request your data in a structured, machine-readable format.
- Right to object: object to processing based on legitimate interests.
To exercise any right, contact us at [email protected]. We will respond within one calendar month.
9. Right to Complain
If you believe we have not handled your personal data correctly, you may lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk | 0303 123 1113.
10. International Data Transfers
Web3Forms states that it operates from India, uses infrastructure providers in several regions, and relies on Standard Contractual Clauses for international transfers where required. Where another processor transfers personal data outside the UK, we require an applicable safeguard such as UK adequacy regulations or approved contractual clauses.
11. Changes to This Policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision.
12. Contact Us
Questions about this policy: [email protected].