We use cookies to enhance your browsing experience and analyze site traffic. By continuing to use this site, you consent to our use of cookies.

pearlquill
Home About Services Contact Commercial Information

GDPR Compliance

Last Updated: September 8, 2026

Our Commitment to Data Protection

pearlquill is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page explains how we comply with GDPR requirements and how you can exercise your data protection rights.

Data Controller

pearlquill acts as the data controller for personal information collected through our website and business operations. We determine the purposes and means of processing your personal data.

Contact details:
pearlquill
42 Castle Street
Liverpool, L2 9SH
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data only when we have a lawful basis under GDPR Article 6:

  • Consent: When you provide explicit consent by submitting forms or opting into communications
  • Contract: When processing is necessary to fulfill our service obligations to you
  • Legitimate Interests: When processing serves our legitimate business interests while respecting your rights
  • Legal Obligation: When we must process data to comply with legal requirements

Your Rights Under GDPR

GDPR grants you comprehensive rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data. We will provide this information in a commonly used electronic format.

Right to Rectification

You may request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when you object to processing and there are no overriding legitimate grounds.

Right to Restriction of Processing

You may request that we limit how we use your data in certain circumstances, such as while we verify data accuracy or assess legitimate grounds for processing.

Right to Data Portability

You may request that we transfer your data to another organization or provide it to you in a structured, machine-readable format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision Making

We do not currently use automated decision-making or profiling that produces legal effects concerning you.

How to Exercise Your Rights

To exercise any of your data protection rights, please submit a request to [email protected]. Include sufficient information to help us identify you and specify which right you wish to exercise.

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of the extension.

We do not charge a fee for processing rights requests unless the request is manifestly unfounded or excessive.

Data Processing Activities

We process personal data for the following purposes:

  • Responding to consultation requests and inquiries
  • Delivering contracted energy consultancy services
  • Maintaining client relationships and project records
  • Improving our website and services
  • Sending service-related communications
  • Complying with legal and regulatory requirements

Data Retention

We retain personal data only as long as necessary for the purposes outlined or as required by law:

  • Inquiry data: 24 months from last contact
  • Client project data: Duration of engagement plus 6 years for business record compliance
  • Website analytics data: 14 months
  • Cookie consent records: 12 months

International Data Transfers

We primarily process data within the United Kingdom. If we transfer data outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Access controls limiting data access to authorized personnel
  • Regular security assessments and updates
  • Staff training on data protection obligations
  • Incident response procedures for data breaches

Data Breach Notification

In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach when required by GDPR.

Complaints

If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

Updates to This Statement

We review and update this GDPR compliance statement as necessary to reflect changes in our data processing activities or legal requirements. The current version will always be available on this page.

pearlquill

Sustainable energy consultancy serving Liverpool and the Northwest region.

Quick Links

  • About Us
  • Services
  • Contact

Legal

  • Privacy Policy
  • Terms of Use
  • GDPR
  • Cookies Policy

Contact

42 Castle Street
Liverpool, L2 9SH
United Kingdom

[email protected]

© 2026 pearlquill. All rights reserved.