PRIVACY POLICY

1 – WHO WE ARE

Profit& is a consulting business specialising in Enterprise Performance Management, Financial Planning & Analysis, Demand Planning and Inventory Management solutions, including Anaplan, Jedox and Abacum implementations. The group comprises Profit& Ltd in the United Kingdom, Profit& Srl in Italy and Profit& Sp. z o.o. in Poland.

For website, business development and group marketing activities, Profit& Ltd is normally the principal controller. Another group entity may be the controller where your enquiry or relationship is specifically with that entity. You can contact the Data Protection Lead using the details below.

Data protection contact: Francesco D’Aguanno, Director and Data Protection Lead
Email: francesco.daguanno@profitand.com

2 – PERSONAL INFORMATION WE COLLECT

• Information you provide, such as your name, business email address, business telephone number, employer, job title and the content of your message.

• Business relationship information, such as services of interest, meeting notes, correspondence and marketing preferences.

• Technical and website usage information, such as IP address, device/browser information, pages visited, referral information, timestamps, cookie identifiers and interaction data, subject to applicable consent requirements.

• Information from professional sources such as LinkedIn or your employer’s website where it is lawful and reasonable to use it for B2B relationship management.

Please do not submit confidential customer datasets, special-category data or other sensitive information through a general website form unless we specifically request it and provide an appropriate secure route.

3 – WEBSITE USAGE INFORMATION

Our website and service providers may generate technical logs needed to deliver and secure the site. With your consent where required, analytics cookies may help us understand how visitors use pages and content. We use this information in aggregated or limited form to measure performance and improve the website.

4 – HOW WE USE PERSONAL DATA

• Respond to enquiries, arrange calls and provide information requested by you.

• Take steps towards and administer a client, supplier or partner relationship.

• Maintain our CRM and manage relevant professional relationships.

• Send relevant B2B updates or content where permitted, and maintain opt-out preferences.

• Measure and improve website performance and content.

• Protect the website, systems and users, prevent misuse and investigate incidents.

• Meet legal, tax, accounting and regulatory obligations and establish, exercise or defend legal claims.

• Support a confidential corporate transaction or due diligence exercise where lawful and necessary, with appropriate access restrictions.

5 – LEGAL BASIS FOR PROCESSING

Where we rely on legitimate interests, we consider whether the use is necessary and proportionate and whether your interests or rights override ours. You can object as described below.

6 – WEBSITE FORMS

When you submit a contact or other website form, the information is used to route and answer your enquiry and may be stored in HubSpot and Microsoft 365. Required fields should be limited to information needed to respond. If the enquiry does not lead to an active relationship, it is normally retained for up to 12 months after closure, unless a longer period is needed for a complaint or legal claim.

7 – HUBSPOT CRM

We use HubSpot to manage prospects, customer contacts, website enquiries, marketing preferences and related interactions. Access is limited to authorised personnel. HubSpot acts primarily as a processor for this information under its contractual terms, although it may act as an independent controller for limited service administration purposes described in its own privacy information.

8 – GOOGLE ANALYTICS

We use Google Analytics to measure website traffic and understand how content performs. Analytics may process online identifiers and information about your device and use of the website. Where required, analytics is activated only after consent and you can change or withdraw your cookie choice.

9 – COOKIES

Cookies and similar technologies are small identifiers stored on or accessed from your device. Strictly necessary cookies support operation, security and your privacy choices. Analytics or other non-essential cookies are used only in accordance with applicable consent rules. Our cookie banner or cookie settings tool provides the current cookie categories, providers and durations and allows you to change your choices. Withdrawing consent does not affect earlier lawful processing.

10 – MARKETING COMMUNICATIONS

We may send professional contacts information about relevant Profit& services, insights or events where permitted by law. Depending on the circumstances, we rely on consent or our legitimate interests in proportionate B2B marketing. Every marketing message should provide an easy way to opt out. You may also object at any time by contacting us. We keep a minimal suppression record so that we can respect your choice.

11 – DATA SHARING

We share personal data only where reasonably necessary with relevant Profit& group entities, authorised personnel, website/CRM/IT providers, analytics providers, professional advisers, banks and payment providers, regulators, courts or public authorities. We may also share limited information with other third parties in case of due diligence controls and legal obligations.

We do not sell personal information. Service providers must handle data under applicable contractual and security requirements. Some recipients, such as banks or professional advisers, act as independent controllers under their own legal duties.

12 – THIRD PARTY PROVIDERS

The providers and their processing may change as our website develops. We update this notice or our cookie information where a material change affects visitors.

13 – INTERNATIONAL TRANSFERS

Our group operates in the UK and EEA and some service providers may store data or permit access from other countries. For restricted transfers, we use a lawful mechanism appropriate to the exporting entity. This may include a UK or EU adequacy decision, Standard Contractual Clauses and the applicable UK transfer mechanism, together with proportionate supplementary safeguards where needed. You may contact us for further information about the relevant safeguard, subject to confidentiality.

14 – DATA RETENTION

These are defaults, not absolute periods. We may keep information longer where required by law, litigation hold, active dispute or regulator request, or delete/anonymise it sooner where it is no longer needed.

15 – SECURITY MEASURES

We use proportionate technical and organisational safeguards, including Microsoft multi-factor authentication, encrypted laptops, BitLocker disk encryption, antivirus protection, backups, restricted access, SharePoint permissions and need-to-know access. No online service is completely secure, but suspected incidents are investigated and managed under our breach procedure.

16 – YOUR RIGHTS

Depending on the circumstances and applicable UK or EU law, you may have rights to be informed, access your data, correct inaccurate data, request deletion, restrict processing, receive portable data, object to processing, withdraw consent and obtain safeguards concerning solely automated decisions. These rights may be subject to legal conditions and exemptions.

You have an absolute right to object to direct marketing. To exercise a right, contact the Data Protection Lead. We may ask for proportionate information to verify your identity and understand your request. We aim to respond within the period required by applicable law.

You may complain to the UK Information Commissioner’s Office where Profit& Ltd is the relevant controller, or to the competent Italian or Polish supervisory authority where the relevant EU entity is controller. We encourage you to contact us first so that we can try to resolve the concern.

QUESTIONS AND CONTACT INFORMATION

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Data Protection Lead francesco.daguanno@profitand.com or by mail at Profit&.

Data Protection Lead: Francesco D’Aguanno 

Profit&
100 Bishopsgate
London
EC2N 4AG
United Kingdom

Changes to this Policy

We may update this policy to reflect changes in law, services, systems or business operations. Material changes will be communicated through an appropriate website notice or other channel where required.