Your information

Privacy notice

This notice covers information submitted through this website and related enquiries. Do not use the public form to send confidential security assessments, access credentials, patient records or other sensitive information.

Who is responsible?

This website is presented by Pearl Lemon Group. For privacy requests, contact info@pearllemongroup.com.

What do we collect?

If you send an enquiry by email, the information you include is received in our business mailbox. If the secure website form is enabled, it collects your name, work email, company, approximate headcount, requested service, information you volunteer about certification and deadlines, and your message. When the form is enabled, a salted hash derived from the visitor's IP address is used for abuse prevention rather than storing the raw address in the lead register. Cloudflare may independently process technical information necessary to deliver and protect the website.

What do we use it for?

We use enquiry data to understand the requirement, respond to the person contacting us, decide whether a service might be suitable, and maintain the correspondence necessary for a possible business relationship. We do not automatically subscribe enquirers to a newsletter or unrelated promotional campaigns.

What is the lawful basis?

For ordinary business enquiries, the principal basis is legitimate interests in answering requested contact and developing a proportionate business relationship, subject to the necessary interests-balancing assessment. Pre-contractual steps may also be relevant where the person contacting us is the prospective individual contracting party. We do not treat the form's privacy acknowledgement as consent to receive promotional marketing.

Who receives the information?

The website uses Cloudflare to serve pages. Where the secure enquiry form has been activated, Cloudflare also processes bot-verification information and maintains a restricted enquiry register; authorised email services may send staff notifications. Otherwise initial enquiries go directly to the contact mailbox using your email application. Personnel and contracted service providers only access information as necessary for the enquiry. Any cross-border transfers and processor arrangements must follow applicable data-protection requirements.

How long is it retained?

When enabled, the technical enquiry register is configured to delete records after 90 days. Email conversations, proposal records and agreements may need to remain longer under the operator's separate business-record retention schedule. Records should not be retained merely because they are technically easy to keep.

Your rights

You may have rights to access, correct, erase or restrict information, and to object to certain uses. Contact us through the address above. We may need to confirm your identity before disclosing personal information. You may complain to the UK Information Commissioner's Office where applicable.

Cookies and form protection

The launch version does not depend on advertising-tracking cookies. Where the secure form is enabled, Cloudflare Turnstile may process technical signals to defend against automated misuse. If optional analytics or additional marketing tools are introduced, this notice and any applicable consent controls must be reviewed.

Last updated: 12 October 2026. See the ICO guidance on legitimate interests.