Last updated: 3 August 2026

This policy explains what personal information Palladio collects, why we collect it, and the rights you have over it. We are the data controller for the information described here.

Who we are

Palladio is an independent strategy and advisory practice registered in England and Wales, with its registered office in London. You can reach us at office@palladio.partners about anything in this policy.

The information we collect

• Contact details you give us: your name, email address, telephone number, organisation and role, submitted through our contact form or given to us directly.

• What you tell us about your situation: the description of the decision or problem you send us, and the service and engagement size you select.

• Correspondence: emails, call notes and meeting records relating to a possible or actual engagement.

• Newsletter details: your email address, if you subscribe, together with whether you have opened or clicked a note we sent.

• Technical information: pages visited, approximate location derived from IP address, device and browser type, collected in aggregate through our analytics.

How we use it

• To reply to your enquiry and arrange an introductory call.

• To provide advisory services and administer an engagement, including invoicing.

• To send the monthly note, where you have asked to receive it.

• To understand how the site is used and improve it.

• To meet our legal, regulatory and record-keeping obligations.

Our lawful basis

Where you have contacted us or entered an engagement, we process your information to take steps at your request and to perform our contract with you. Where we send the monthly note, we rely on your consent, which you can withdraw at any time. Where we improve the site or keep records of our work, we rely on our legitimate interests in running the practice, balanced against your rights.

Sharing your information

We do not sell personal information and we do not share it for advertising. We disclose it only to the service providers who help us operate — website hosting, email, analytics and accounting — each bound to process it on our instructions, to our professional advisers where necessary, and to a regulator or court where we are required to do so by law.

International transfers

Some of our providers process information outside the United Kingdom. Where that happens we rely on adequacy regulations or on standard contractual clauses approved for use in the UK, so that your information keeps equivalent protection.

How long we keep it

Enquiries that do not lead to an engagement are kept for twelve months. Engagement records are kept for seven years after the engagement ends, to meet professional and tax requirements. Newsletter details are kept until you unsubscribe. Analytics data is retained in aggregate for twenty-six months.

Your rights

• To ask what personal information we hold about you and receive a copy.

• To have inaccurate information corrected.

• To ask us to delete information where we no longer need it.

• To object to or restrict how we use it.

• To receive information you gave us in a portable format.

• To withdraw consent at any time, without affecting anything done beforehand.

To exercise any of these, write to office@palladio.partners. We will respond within one month.

Security

Access to client information is limited to the engagement team. Information is held on encrypted systems with access controls, and we review those arrangements regularly. No system is completely secure, and we will tell you and the regulator promptly if a breach occurs that is likely to affect your rights.

Changes to this policy

We update this policy when our practices change. The date at the top shows when it was last revised, and material changes will be notified to clients directly.

Contact and complaints

Please raise any concern with us first at office@palladio.partners. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk.