Privacy Policy
Purple Panda Consulting Ltd
Last updated: 16 March 2026
Purple Panda Consulting Ltd ("we", "us", or "our") is committed to protecting your privacy and handling data in a transparent and responsible manner. This Privacy Policy explains how information is collected, used, and protected when you use our website and associated services.
This policy applies to www.purplepandaconsulting.co.uk and associated services including the Purple Panda Data Maturity Assessment platform.
1. Data Controller
Purple Panda Consulting Ltd is the organisation responsible for processing information collected through this website and associated services.
Company Number: 14496358
2. Purpose of the Platform
Purple Panda Consulting provides a digital maturity assessment platform designed to help organisations evaluate their data governance, digital transformation, and operational maturity capabilities.
Users can complete structured assessments and receive reports describing their organisational maturity profile and recommended improvement areas.
Assessment responses may also be used in anonymised form to generate benchmarking insights across organisations.
3. Data Minimisation
The Purple Panda maturity assessment platform is designed to collect organisational and business information, rather than personal data.
The purpose of the platform is to assess organisational capabilities relating to areas such as data governance, digital transformation, and operational maturity. As a result, the information collected through assessments is intended to reflect business practices and organisational structures, not personal information about individuals.
To operate the platform, we collect a limited amount of personal data necessary to create and manage user accounts. This currently consists of:
- Email address
- Company name
- Organisation sector
- Company size
- Country
- Respondent role (optional)
- Business unit (optional)
Users should avoid submitting personal information within free-text responses or other assessment inputs where it is not required.
Assessment responses are intended to describe organisational practices and maturity levels rather than information relating to identifiable individuals.
4. Information We Collect
Account Information
When users access the platform we store limited account information:
- Email address
- Company name
- Organisation sector
- Company size
- Country
This information is required to create and maintain access to the platform.
Assessment Information
When a maturity assessment is completed the platform collects:
- Responses to assessment questions
- Calculated maturity scores
- Generated maturity profiles and reports
- Respondent role and business unit (where provided)
Assessment responses may be aggregated and anonymised for benchmarking analysis.
Technical Information
When users access the platform we may automatically collect limited technical information required to operate and secure the service, such as:
- IP address (anonymised where analytics are enabled)
- Access timestamps
- Basic browser or device information
- Pages visited and interaction patterns (only if analytics cookies are accepted)
Technical information is used solely for security, operational, and service improvement purposes.
Where Google Analytics is enabled, anonymised usage data is processed by Google under their standard data processing terms. Google's privacy policy is available at https://policies.google.com/privacy.
5. How Information Is Collected
Information may be collected when:
- a user accesses the platform using a secure login link
- a user completes a maturity assessment
- the platform generates a report from assessment responses
- a user interacts with the website or platform infrastructure
6. Authentication
Accounts are accessed using passwordless authentication.
Users log in through secure email-based magic links sent to their registered email address. No passwords are stored by the platform.
7. Emails We Send
The platform only sends essential service-related emails. These may include:
- secure login links
- system notifications
- generated maturity assessment reports
We do not send marketing or promotional emails.
8. Benchmarking and Anonymisation
Assessment responses may be used to generate benchmarking insights across organisations.
Where benchmarking analysis is performed:
- individual organisations are not identified
- responses are aggregated across multiple organisations
- identifiable account data is not included in benchmarking datasets
Benchmark insights are used to improve understanding of maturity trends across industries and sectors.
9. Legal Basis for Processing
Legitimate Interests
To operate the platform, provide reports, maintain system security, and improve the service.
Contractual Necessity
Where processing is required to provide the maturity assessment service requested by the user.
10. Data Retention
Account and assessment data are retained until the user requests deletion.
Users may request deletion of their data at any time through the contact form available on the website.
11. Hosting and Infrastructure
The platform is hosted on infrastructure provided by third-party hosting providers.
These providers may process information on our behalf solely for the purpose of operating and maintaining the service.
12. Cookies and Local Storage
Authentication is handled through secure token-based magic links rather than session cookies. Assessment progress and user preferences are stored in your browser's local storage.
If you accept analytics cookies via the consent banner, we use Google Tag Manager to load Google Analytics, which collects anonymised usage data including pages visited, time on site, and general interaction patterns. IP anonymisation is enabled. No advertising or behavioural tracking cookies are used.
If you decline analytics cookies, Google Analytics is not loaded and no usage data is collected.
For full details, please see our Cookie Policy.
13. Sharing and Access to Reports
Assessment reports are accessible to the account holder.
Reports may also be accessible through secure shareable links where this functionality is enabled. Users are responsible for managing access to any shared links they distribute.
14. Data Security
We implement reasonable technical and organisational measures to protect information, including:
- encrypted connections (HTTPS)
- restricted access to system infrastructure
- secure authentication mechanisms
However, no internet-based service can be guaranteed to be completely secure.
15. Your Data Protection Rights
Under UK data protection law users have the right to:
- request access to the information we hold about them
- request correction of inaccurate data
- request deletion of their data
- request restriction of processing in certain circumstances
- object to processing where applicable
Requests can be submitted through the contact form available on the website.
16. Children
The platform is not intended for individuals under the age of 16.
We do not knowingly collect personal information from children.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our services or legal requirements.
The latest version will always be published on the website.
18. Contact
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us through the contact form available on our website.
If you need support with a privacy request, please use the contact form.