Privacy Policy
Your data protection rights, and how to raise a concern about the way we handle your personal information.
Revised edition, September 2026 · Supersedes the version dated December 2022
Background Purpose People Ltd understands that your privacy is important to you and that you care about how your Personal Data is used and shared online. We respect and value the privacy of everyone who visits this website, https://www.purposepeopleltd.com/ ("Our Site"), and will only collect and use Personal Data in ways that are described here, and in a manner that is consistent with Our obligations and your rights under the law. Please read this Privacy & Cookies Policy carefully and ensure that you understand it. It explains how We handle your Personal Data.
1. Definitions and Interpretation
In this Policy the following terms shall have the following meanings:
| "COOKIE" | means a small text file placed on your computer or device by Our Site when you visit certain parts of Our Site and/or when you use certain features of Our Site. Details of the Cookies used by Our Site are set out in section 15, below; |
| "COOKIE LAW" | means the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003, as amended; |
| "DATA PROTECTION LEGISLATION" | means all applicable legislation in force from time to time in the United Kingdom applicable to data protection and privacy, including but not limited to the UK GDPR; the Data Protection Act 2018 (and regulations made thereunder), as amended by the Data (Use and Access) Act 2025; and the Privacy and Electronic Communications Regulations 2003, as amended; |
| "DATA PROTECTION COMPLAINT" | means a complaint made under section 164A of the Data Protection Act 2018 that We have infringed your data protection rights, as described in section 16 below; |
| "PERSONAL DATA" | means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means Personal Data that you give to Us via Our Site. This definition shall, where applicable, incorporate the definitions provided in the Data Protection Legislation, including Special Category Data (see section 5.2); and |
| "WE/US/OUR" | means Purpose People Ltd, a company registered in England under company number 12428531 of 2 Beclands Road, London, SW17 9TJ. |
2. Information About Us
2.1 Our Site https://www.purposepeopleltd.com/ is owned and/or operated by Us.
2.2 We are regulated by: The RCOT & HCPC.
3. What Does This Policy Cover?
This Privacy Policy applies only to your use of Our Site. Our Site may contain links to other websites. Please note that We have no control over how your data is collected, stored, or used by other websites, and We advise you to check the privacy policies of any such websites before providing any data to them.
4. Your Rights
4.1 As a data subject, you have the following rights under the Data Protection Legislation, which this Policy and Our use of Personal Data have been designed to uphold:
4.1.1 The right to be informed about Our collection and use of Personal Data;
4.1.2 The right of access to the Personal Data We hold about you (see section 13);
4.1.3 The right to rectification if any Personal Data We hold about you is inaccurate or incomplete (please contact Us using the details in section 17);
4.1.4 The right to be forgotten, i.e., the right to ask Us to delete any Personal Data We hold about you (We only hold your Personal Data for a limited time, as explained in section 7, but if you would like Us to delete it sooner, please contact Us using the details in section 17);
4.1.5 The right to restrict (i.e., prevent) the processing of your Personal Data;
4.1.6 The right to data portability (obtaining a copy of your Personal Data to re-use with another service or organisation);
4.1.7 The right to object to Us using your Personal Data for particular purposes;
4.1.8 Rights with respect to automated decision making and profiling: for clarity, We do not currently use your Personal Data for any automated decision-making or profiling which produces legal or similarly significant effects on you; and
4.1.9 The right to make a Data Protection Complaint directly to Us about how We have handled your Personal Data, before referring the matter to the regulator (see section 16).
4.2 If you have any cause for complaint about Our use of your Personal Data, please use the Data Protection Complaints process described in section 16, and We will do Our best to solve the problem for you. If We are unable to help, you also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (transitioning to the "Information Commission").
4.3 For further information about your rights, please contact the Information Commissioner's Office or your local Citizens Advice Bureau.
5. What Data Do We Collect?
5.1 Depending upon your use of Our Site, We may collect some or all of the following personal and non-Personal Data (please also see section 15 on Our use of Cookies and similar technologies): name; date of birth; business/company name; job title; profession; contact information such as email addresses and telephone numbers; demographic information such as post code, preferences and interests; payment or invoicing details, where you engage Us for services; IP address; web browser type and version; and operating system.
5.2 Special Category Data Where you make an enquiry or referral through Our Site that includes information about a health condition, disability, or care need, this is Special Category Data under Article 9 of the UK GDPR. We will only collect and use this data where you have given your explicit consent, or where processing is necessary for the provision of health or social care, and We will apply additional safeguards to it beyond those applied to ordinary Personal Data.
6. How Do We Use Your Data?
6.1 All Personal Data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with Our obligations and safeguard your rights under the Data Protection Legislation at all times. For more details on security see section 8, below.
6.2 Our use of your Personal Data will always have a lawful basis. The table below sets out the lawful basis We rely on for each purpose:
| Purpose | Lawful basis |
| Providing and managing your access to Our Site | Legitimate interests: running and securing Our Site |
| Personalising and tailoring your experience on Our Site | Consent (via cookie preferences, see section 15) |
| Supplying Our services to you | Performance of a contract with you |
| Personalising and tailoring Our services for you | Performance of a contract with you |
| Replying to emails from you | Legitimate interests: responding to enquiries |
| Market research | Consent |
| Analysing your use of Our Site to improve it | Consent (analytics cookies, see section 15) |
6.3 With your permission and/or where permitted by law, We may also use your data for marketing purposes, which may include contacting you by email, telephone and post with information, news, and offers on Our services. We will not send you any unsolicited marketing or spam and will take all reasonable steps to ensure that We fully protect your rights and comply with Our obligations under the Data Protection Legislation.
6.4 You have the right to withdraw your consent to Us using your Personal Data at any time, and to request that We delete it.
6.5 We do not keep your Personal Data for any longer than is necessary in light of the reason(s) for which it was first collected. Data will therefore be retained for the following periods (or its retention will be determined on the following bases):
6.5.1 We will retain your contact details for as long as we contract with you and for 72 months thereafter;
6.5.2 We will retain your contact details for 36 months if you have enquired about our services; thereafter, they will be deleted;
6.5.3 We will retain your contact details indefinitely if you have consented to receive marketing materials from us, and for a period of 3 months once you unsubscribe; and
6.5.4 We will retain your payment and financial information for as long as we contract with you and, thereafter, for the permitted period of time required by law.
7. How and Where Do We Store Your Data?
7.1 We only keep your Personal Data for as long as We need to in order to use it as described above in section 6, and/or for as long as We have your permission to keep it.
7.2 We will store some of your Personal Data in the UK. This means that it will be fully protected under the UK's Data Protection Legislation.
7.3 We will store some of your Personal Data within the European Economic Area (the "EEA"). The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein. This means that your Personal Data will be fully protected under the EU GDPR and/or to equivalent standards by law. Transfers of Personal Data to the EEA from the UK are permitted without additional safeguards.
7.4 We may store some of your Personal Data in countries outside of the UK and EEA ("third countries"), for example where a supplier We use is based in the United States. Data security is very important to Us, and We have taken suitable measures to safeguard and secure data collected through Our Site.
7.5 Where your data is stored
| Processor | What it's used for | Safeguard for transfers outside the UK/EEA |
| Google Drive | Email correspondence | Standard Contractual Clauses / UK International Data Transfer Addendum, as provided in Microsoft's data protection terms |
| Dubsado | Website enquiry form | Standard Contractual Clauses / UK International Data Transfer Addendum, as provided in Dubsado's data protection terms |
| Google Drive | Storage of client and business records | To confirm: UK/EEA hosting, or SCCs/IDTA if hosted elsewhere |
| Qunote | Client session notes and care coordination | UK-hosted (to confirm with Qunote's own terms) |
7.6 Where We rely on Standard Contractual Clauses or the UK International Data Transfer Addendum, We review these periodically to ensure they remain an effective safeguard for your data.
7.7 Steps We take to secure and protect your data All devices and computers that we store your data on are password protected; All devices and computers that we store your data on have anti-virus software and are kept updated to the most recent operating system; and We only store your data on computers and devices owned by Us, or by Contractors who process data on Our behalf. We take all reasonable steps to ensure that your data is handled safely, securely, and in accordance with your rights, Our obligations, and the obligations of the third party under the law.
8. Do We Share Your Data?
8.1 We may sometimes contract with third parties to supply products and services to you on Our behalf. These may include payment processing, delivery of goods, search engine facilities, advertising, and marketing. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, Our obligations, and the obligations of the third party under the law.
8.2 We may compile statistics about the use of Our Site, including data on traffic, usage patterns, user numbers, and other information. All such data will be anonymised and will not include any personally identifying data, or any anonymised data that can be combined with other data to identify you. We may from time to time share such data with third parties such as prospective investors, affiliates, partners, and advertisers. Data will only be shared and used within the bounds of the law.
8.3 We may sometimes use third party data processors that are located outside of the United Kingdom and EEA. Where We transfer any Personal Data outside the EEA, We will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK under the Data Protection Legislation, including:
8.3.1 Using Standard Contractual Clauses ("SCCs") or the UK International Data Transfer Addendum as a mechanism to safely process data outside of the UK and EEA to third countries which have not been granted adequacy; or
8.3.2 Relying on a country that has been granted adequacy, confirming its data protection legislation is adequate to safeguard data processing.
8.4 In certain circumstances, We may be legally required to share certain data held by Us, which may include your Personal Data (for example where We are involved in legal proceedings, complying with legal requirements, a court order, or a governmental authority).
8.5 Some parts of Our Site allow visitors to leave comments, such as Our blog page. If you do leave a comment and disclose your Personal Data within that comment, please be aware that any other visitor is able to see that information. You do this at your own risk, and We have no control of the Personal Data in that instance.
9. What Happens If Our Business Changes Hands?
9.1 We may, from time to time, expand or reduce Our business, and this may involve the sale and/or the transfer of control of all or part of Our business. Any Personal Data that you have provided will, where it is relevant to any part of Our business that is being transferred, be transferred along with that part, and the new owner or newly controlling party will, under the terms of this Privacy & Cookies Policy, be permitted to use that data only for the same purposes for which it was originally collected by Us.
9.2 In the event that any of your data is to be transferred in such a manner, you will not be contacted in advance and informed of the changes.
10. How Can You Control Your Data?
10.1 In addition to your rights under the Data Protection Legislation, set out in section 4, when you submit Personal Data via Our Site, you may be given options to restrict Our use of your data. In particular, We aim to give you strong controls on Our use of your data for direct marketing purposes, including the ability to opt out of receiving emails from Us, which you may do by unsubscribing using the links provided in Our emails and at the point of providing your details.
10.2 You may also wish to sign up to one or more of the preference services operating in the UK: the Telephone Preference Service ("TPS"), the Corporate Telephone Preference Service ("CTPS"), and the Mailing Preference Service ("MPS"). These may help to prevent you receiving unsolicited marketing. Please note, however, that these services will not prevent you from receiving marketing communications that you have consented to receiving.
11. Your Right to Withhold Information
11.1 You may access Our Site without providing any data at all.
11.2 You may restrict Our use of Cookies. For more information, see section 15.
12. Children's Data
Our Site is intended for use by adults, including parents, guardians, and referring professionals making an enquiry on behalf of a child. We do not knowingly collect Personal Data directly from children through Our Site. Where an enquiry or referral relates to a child, We expect this to be submitted by a parent, guardian, or professional with authority to do so, and We will handle any Personal Data relating to that child in line with this Policy and with additional care appropriate to their age.
13. How Can You Access Your Data?
You have the right to ask for a copy of any of your Personal Data held by Us (where such data is held). Under the Data Protection Legislation, no fee is payable, and We will provide any and all information in response to your reasonable request free of charge, and without undue delay. Please contact Us for more details at admin@purposepeopleltd.com, or using the contact details in section 17. Cookies Policy
15. Our Use of Cookies
15.1 Our Site may place and access certain first party Cookies on your computer or device. First party Cookies are those placed directly by Us and are used only by Us. We use Cookies to facilitate and improve your experience of Our Site and to provide and improve Our services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy and Personal Data is protected and respected at all times.
15.2 All Cookies used by and on Our Site are used in accordance with current Cookie Law. We may use some or all of the following types of Cookie:
15.2.1 Strictly Necessary Cookies A Cookie falls into this category if it is essential to the operation of Our Site, supporting functions such as logging in and completing forms.
15.2.2 Analytics Cookies It is important for Us to understand how you use Our Site, for example how efficiently you are able to navigate around it and what features you use. Analytics Cookies enable Us to gather this information, helping Us to improve Our Site and your experience of it.
15.2.3 Functionality Cookies Functionality Cookies enable Us to provide additional functions to you on Our Site, such as personalisation and remembering your saved preferences. Some functionality Cookies may also be strictly necessary Cookies, but not all necessarily fall into that category.
15.2.4 Persistent and Session Cookies Any of the above types of Cookie may be persistent (remaining on your device for a predetermined period, activated each time you visit Our Site) or a session Cookie (temporary, deleted when you close your browser).
15.3 Before Cookies are placed on your computer or device, you will be shown a pop-up requesting your consent to set those Cookies (other than Strictly Necessary Cookies). By giving your consent, you are enabling Us to provide the best possible experience and service to you. You may deny consent to the placing of non-essential Cookies; certain features of Our Site may then not function as intended. You will be given the opportunity to allow only first party Cookies and block third party Cookies.
15.4 Certain features of Our Site depend on Strictly Necessary Cookies to function. Your consent will not be sought to place these, but it is still important that you are aware of them. You may still block these by changing your internet browser's settings, but Our Site may not work properly if you do so.
15.5 Cookies used on Our Site
| Name | Purpose | Duration | Strictly Necessary |
| pp-cookie-choice (local storage) | Remembers whether you accepted or rejected non-essential cookies, so we do not ask you again. | 12 months | Yes |
| _ga, _ga_* (Google Analytics) | Analytics cookies set by Google Analytics, only after you choose "Accept all" on our cookie banner. | Up to 14 months | No |
| Dubsado session cookies | Our enquiry form is provided by Dubsado and loaded in a frame on our contact page; Dubsado may set cookies necessary for that form to work. | Session / per Dubsado's policy | Yes (for form function) |
15.6 Our Site uses Google Analytics 4, a third party analytics service, but only if you consent via Our cookie banner. If you choose "Reject non-essential," or make no choice, no analytics cookies are set and Google Analytics does not load. Google Analytics collects information about how visitors use Our Site in an aggregated way, with IP anonymisation enabled. You can change your choice at any time by clearing this site's data in your browser.
15.7 In addition to the controls We provide, you can choose to enable or disable Cookies in your internet browser. Most browsers accept Cookies by default, but this can be changed. For further details, please consult the help menu in your browser or the documentation that came with your device.
15.8 You can choose to delete Cookies on your device at any time; however you may lose information that enables you to access Our Site more quickly and efficiently, including login and personalisation settings.
15.9 It is recommended that you keep your internet browser and operating system up to date, and consult the help and guidance provided by your browser's developer or your device's manufacturer if you are unsure about adjusting your privacy settings.
16. Data Protection Complaints
16.1 From 19 June 2026, section 164A of the Data Protection Act 2018 gives you the right to complain directly to Us if you believe We have infringed your rights under the Data Protection Legislation in the way We have handled your Personal Data (for example, if you feel a request you made under section 4 or 13 has not been handled properly, or has been delayed without good reason).
16.2 You can make a Data Protection Complaint to Us in either of the following ways:
By emailing Us at admin@purposepeopleltd.com, or writing to Us at the address in section 17, marking your correspondence "Data Protection Complaint."
16.3 What happens next: We will acknowledge your Data Protection Complaint within 30 days of receiving it. We will investigate your complaint without undue delay, and keep you informed if We need longer to look into a particular point. We will write to you in plain language with the outcome of Our investigation and any steps We have taken or will take as a result. If you are not satisfied with Our response, you have the right to refer your Data Protection Complaint to the Information Commissioner's Office (transitioning to the "Information Commission") at any time.
16.4 Making a Data Protection Complaint to Us first is not a legal requirement before you contact the regulator, but We would welcome the opportunity to put things right directly wherever We can.
17. Contacting Us
If you have any questions about Our Site or this Privacy Policy, please contact Us by email at admin@purposepeopleltd.com. Please ensure that your query is clear, particularly if it is a request for information about the data We hold about you (see section 13), or if you are making a Data Protection Complaint (see section 16).
18. Changes to Our Privacy Policy
We may change this Privacy Policy from time to time, for example if the law changes. Any changes will be immediately posted on Our Site. This policy was last updated in December 2022, and was revised and republished on this site in September 2026 to reflect changes introduced by the Data (Use and Access) Act 2025.