Privacy Policy

Privacy Policy

This Privacy Policy explains how Innovity collects, uses, stores, shares, and protects personal data when you visit our website, complete a form, book a call, use one of our assessments or scorecards, request information from us, subscribe to our emails, or otherwise interact with us.

We are committed to handling personal data fairly, lawfully, and transparently.

Innovity is the controller of your personal data for the purposes of UK data protection law.

Business name: Innovity
Contact email: paul@innovity.co.uk

If you have any questions about this Privacy Policy or how we use your personal data, please contact us using the details above.

Identity and contact data
This may include your name, email address, phone number, postal address, company name, job title, and any other contact details you provide.

Business information
This may include information you provide about your business, such as turnover range, team size, leadership structure, systems, pricing, forecasting, operational challenges, commercial performance, and goals.

Assessment and scorecard data
If you complete one of our assessments, diagnostics, or scorecards, we may collect your answers, score, result category, recommendations, and any notes or comments you submit.

Communication data
This may include information you provide when you contact us, enquire about our services, book a call, respond to emails, or otherwise communicate with us.

Technical and usage data
This may include your IP address, browser type and version, device type, operating system, time zone, pages viewed, referring website, time spent on pages, clicks, and other website interaction data.

Marketing and preference data
This may include your email preferences, consent choices, subscription status, and your preferences for receiving communications from us.

• you fill in a form on our website;
   
• you complete a scorecard, diagnostic, or assessment;
   
• you request information from us;
   
• you book a call or meeting;
   
• you subscribe to emails, updates, or other communications;
   
• you contact us by email, phone, social media, or other channels;
   
• you use our website and cookies or analytics tools collect technical data automatically.
   

The ICO says people must be given privacy information at the time their personal data is collected. 

We may use your personal data for the following purposes:

• to respond to enquiries and provide information you request;
   
• to send you the results of a scorecard, assessment, or diagnostic you have completed;
   
• to analyse your responses and provide relevant recommendations;
   
• to book, confirm, and manage calls, consultations, and meetings;
   
• to provide and improve our services;
   
• to keep internal records and administer our business;
   
• to send service-related communications;
   
• to send marketing emails, updates, and offers where permitted and appropriate;
   
• to monitor website performance, website usage, and security;
   
• to comply with legal, regulatory, tax, and accounting obligations;
   
• to establish, exercise, or defend legal claims where necessary.
   

We will only use your personal data where we have a lawful basis to do so. The ICO says your lawful basis must be identified and included in your privacy notice. 

Depending on the circumstances, we rely on one or more of the following lawful bases:

Consent
Where you have clearly agreed to receive marketing emails or other optional communications from us, or where consent is otherwise required.

Contract
Where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you.

Legitimate interests
Where it is reasonably necessary for our legitimate business interests, including responding to enquiries, delivering requested scorecard results, following up on genuine business interest, improving our services, and running our business, provided your interests and fundamental rights do not override those interests.

Legal obligation
Where we need to process your personal data to comply with a legal or regulatory obligation. 

If you opt in, or if we are otherwise permitted to do so under applicable law, we may send you marketing emails and other communications about our services, insights, offers, events, tools, and resources.

You can unsubscribe from marketing emails at any time by:

• clicking the unsubscribe link in any marketing email; or
   
• contacting us at paul@innovity.co.uk.
   

If you opt out of marketing, we may still send you service-related communications where necessary, such as messages about a scorecard you completed, a booking you made, or information you specifically requested.

The ICO says PECR applies alongside UK GDPR for electronic marketing and cookies, and consent under PECR uses the UK GDPR standard. 

If you complete one of our scorecards, diagnostics, or assessments, we may use the information you provide to:

• calculate your result or score;
   
• generate tailored feedback or recommendations;
   
• send your results to you by email;
   
• follow up with relevant information related to your result;
   
• understand common business challenges and improve our tools and services.
   

Unless clearly stated otherwise at the point of collection, completing a scorecard does not automatically mean you must consent to ongoing marketing. Where separate marketing consent is required, we will ask for it clearly.

We may use cookies and similar technologies on our website.

Some cookies are strictly necessary for the website to function. Others may be used for analytics, performance, user experience, advertising, or other non-essential purposes.

Where required by law, we will ask for your consent before placing non-essential cookies on your device. We will also provide information about what those cookies do and why we use them. The ICO says cookie information must be clear and easily available, and valid consent must be freely given, specific, informed, and involve clear affirmative action. 

You can manage your cookie preferences through our cookie banner where available, and through your browser settings.

We do not sell your personal data.

We may share your personal data with trusted third parties where reasonably necessary to operate our business, deliver our services, or comply with our legal obligations. This may include:

• website hosting providers;
   
• email marketing providers;
   
• CRM providers;
   
• scorecard or assessment platform providers;
   
• booking and calendar software providers;
   
• analytics providers;
   
• payment processors, where relevant;
   
• IT support providers;
   
• professional advisers such as accountants, solicitors, or insurers;
   
• regulators, authorities, courts, or law enforcement where required.
   

We require service providers to handle personal data appropriately and only for permitted purposes.

Some of our service providers may process personal data outside the UK.

Where personal data is transferred outside the UK, we will take reasonable steps to ensure it is protected and handled in accordance with UK data protection law, including the use of appropriate safeguards where required.

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, reporting, and record-keeping requirements.

Retention periods may vary depending on the type of data and the reason we hold it. 

For example:

• enquiry data may be kept for a reasonable period in case you wish to proceed;
   
• scorecard and diagnostic data may be kept so we can provide results, follow-up support, and maintain business records;
   
• marketing data may be kept until you unsubscribe or ask us to stop;
   
• financial and transaction records may be retained for as long as required by law.
   

When personal data is no longer needed, we will delete it, anonymise it, or securely dispose of it where appropriate.

The ICO says privacy information should include retention periods or the criteria used to determine them. 

Under data protection law, you may have rights including the right to:

• access your personal data;
   
• have inaccurate personal data corrected;
   
• request deletion of your personal data;
   
• restrict processing of your personal data;
   
• object to processing of your personal data;
   
• withdraw consent where we rely on consent;
   
• request transfer of your personal data in certain circumstances;
   
• object at any time to the use of your personal data for direct marketing.
   

The ICO says people must be told about their information rights and how to complain. 

To exercise any of your rights, please contact us at paul@innovity.co.uk.

If you have concerns about how we handle your personal data, please contact us first and we will try to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office in the UK. The ICO is the UK supervisory authority for data protection matters. 

We take reasonable technical and organisational measures to protect personal data from accidental loss, misuse, unauthorised access, disclosure, alteration, or destruction.

However, no website, platform, or method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Our website may contain links to third-party websites, platforms, or services.

We are not responsible for the content, privacy practices, or security of those third-party websites. If you follow a link to a third-party website, you should read their privacy notice before submitting personal data.

Our website, services, and assessments are not directed at children under 18, and we do not knowingly collect personal data from children.

If we become aware that we have collected personal data from a child without a lawful basis, we will take steps to delete it.

We may update this Privacy Policy from time to time.

Any changes will be posted on this page and the updated version will take effect from the date shown at the top of the policy.

If you have any questions about this Privacy Policy or how we handle personal data, please contact:

Innovity
Email: paul@innovity.co.uk

Last updated: 20 March 2026