1) Who we are & contact

Data Controller: CLC Consult (operator of primeassetpartners.co.uk)

2) Personal data we collect

We collect and process the following categories of personal data:

• Identification & contact: name, email address, phone number (if provided), company, role.
• Enquiry & booking details: information submitted through our Book A Call form and the Download Investment Summary form.
• Marketing preferences: your choices about receiving newsletters, updates, or event information.
• Website & technical: IP address, device and browser type, pages viewed, time on page, referring URLs, general location (city/region), and similar diagnostic data collected via cookies and analytics.
• Session replay data: anonymised/psuedonymised interaction data from tools like Lucky Orange (e.g., clicks, scrolls, mouse movements) used to improve usability.

We typically obtain data directly from you (forms, email) and automatically via cookies/analytics. We may also receive data from our service providers (e.g., CRM) when lawful.

3) How we use your data (purposes & lawful bases)

We process personal data on the following bases under the UK GDPR:

• Operate and secure the website (load pages, prevent fraud, measure performance, fix issues). Lawful basis: Legitimate interests.
• Respond to enquiries & provide information (e.g., calls, investment summaries). Lawful basis: Contract or steps prior to entering a contract; Legitimate interests.
• Manage bookings & client relationships. Lawful basis: Contract; Legitimate interests.
• Send marketing communications (newsletters, updates) where permitted. Lawful basis: Consent (where required) or Legitimate interests. You can opt out at any time.
• Improve our services and user experience using analytics and session replay. Lawful basis: Consent (for non-essential cookies) and Legitimate interests.
• Comply with legal obligations (e.g., record-keeping, regulatory requests). Lawful basis: Legal obligation.

4) Cookies, analytics & session replay

We use cookies and similar technologies for essential site functions, analytics, and marketing. Non-essential cookies (including marketing/analytics) run only with your consent via our banner where required. You can change your preferences at any time using the banner or your browser settings. Blocking some cookies may affect site functionality.

• Analytics: Google Analytics helps us understand traffic and usage patterns.
• Session replay/UX: Lucky Orange may capture anonymised interaction data (e.g., clicks, scrolls) and create heatmaps to help us improve usability. We configure it to avoid capturing sensitive fields.
• CRM & forms: HubSpot may set cookies to support form submissions, remember preferences, and attribute enquiries.
• Marketing cookies: Where implemented, these help measure campaign performance and personalise content. They are optional and require consent.

For more detail (including a current list of cookies and their lifespans), please see our Cookie Policy (if available on the site).

5) Sharing your data

We do not sell your personal data. We may share personal data with:

• Service providers (processors): website hosting, analytics (Google), session replay (Lucky Orange), CRM & forms (HubSpot), and related IT tools—strictly under contract and our instructions.
• Professional advisers: legal, accounting—where necessary.
• Authorities: where required by law or to protect rights, safety, and property.

We do not share client data with partners or affiliates for their independent use.

6) International transfers

Some providers may process data outside the UK. Where this occurs, we implement appropriate safeguards (e.g., the UK International Data Transfer Agreement (IDTA), the EU Standard Contractual Clauses with UK Addendum, or other lawful mechanisms).

7) How long we keep your data

As a new company, we are formalising our retention schedule. Until finalised, we apply the following practical defaults:

• Enquiries & booking data (forms/HubSpot): up to 24 months after last contact (unless you become a client or you ask us to delete it sooner).
• Client/project records: for the duration of the engagement and up to 7 years thereafter (to meet legal and tax obligations).
• Marketing lists: until you opt out or we detect prolonged inactivity, subject to periodic cleansing.
• Analytics & session replay data: retained according to tool configuration (commonly 14–26 months for analytics and shorter windows for session replay). We strive to keep these as short as reasonably possible.

8) How we protect your data

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. No system is 100% secure; if we become aware of a breach affecting your data, we will act in accordance with applicable laws.

9) Your rights (UK GDPR)

Subject to certain conditions and exemptions, you have the right to:

• Access your personal data and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase your data in certain circumstances.
• Restrict processing in certain circumstances.
• Object to processing based on our legitimate interests and to direct marketing.
• Data portability where processing is based on consent or contract and carried out by automated means.
• Withdraw consent at any time where processing is based on consent (this won’t affect the lawfulness of processing before withdrawal).

To exercise these rights, contact us using the details below. We may need to verify your identity. We aim to respond within one month.

10) Children

Our site and services are not directed at children. We do not knowingly collect personal data from anyone under 13 years old. If you believe a child has provided us personal data, please contact us so we can delete it.

11) Third-party links

Our site may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

12) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page with the updated date at the top.

13) How to contact us & complaints

If you have questions about this Privacy Policy or how we handle your data, contact:

You can also complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data: ico.org.uk/make-a-complaint | Tel: +44 303 123 1113

Plain-English summary

• We collect only what we need to run the site, respond to you, and deliver services.
• We never sell your personal data and we don’t share it with affiliates/partners for their own use.
• Analytics, marketing and session-replay cookies are optional and require your consent.
• You can unsubscribe from marketing at any time and exercise your UK GDPR rights by emailing us.