PRIVACY POLICY & GDPR

Effective Date: 19th April 2024

Last Updated: 15th April 2025

1. Introduction

At Peak Strategic, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the EU GDPR.

2. Who We Are

Peak Strategic Consulting Ltd (“we”, “us”, “our”) is a UK-based consultancy that provides strategic services to startups, scale-ups, and growth-stage businesses. For the purposes of data protection law, we act as the “controller” of your personal data.

3. What Data We Collect

We may collect and process the following types of personal data:

  • Identity Data – Name, job title, business name

  • Contact Data – Email address, telephone number, business address

  • Engagement Data – Details of communications and interactions with us (calls, meetings, emails)

  • Marketing Data – Your preferences for receiving updates, newsletters, or event invitations

  • Website Data – IP address, device type, operating system, and browser type (via cookies)

4. How We Use Your Data

Your data is used only for the purposes it was collected, which may include:

  • Delivering our consultancy services

  • Responding to inquiries and communications

  • Sending relevant updates or resources (with your consent)

  • Internal analytics and service improvement

  • Fulfilling legal or regulatory obligations

We do not disclose or share your personal data with third parties unless:

  • You have given explicit, revocable consent;

  • We are legally required to do so;

  • It is necessary to protect our rights or defend against legal claims.

We will never sell your data or use it for purposes beyond those outlined above without your express permission.

5. Data Retention

We retain personal data only for as long as it is necessary to fulfill the purposes for which it was collected or as required by law. Once data is no longer needed, it is securely deleted or anonymised.

6. Your Rights

You have the following rights regarding your personal data:

  • The right to request access to your data

  • The right to request correction of inaccurate data

  • The right to request erasure of your data (“right to be forgotten”)

  • The right to restrict or object to processing

  • The right to withdraw your consent at any time

To exercise these rights, please contact us using the details provided below.

7. Data Security

We implement a range of technical and organisational security measures to protect your data, including:

  • Secure servers and firewalls

  • SSL encryption across our website and communications

  • Role-based access control and staff confidentiality obligations

  • Regular data access audits and password protection

  • Up-to-date antivirus and malware protection

  • Secure backups with restricted access

These measures are designed to protect your data from unauthorised access, alteration, or loss.

8. International Transfers

We do not transfer your personal data outside the United Kingdom or the European Economic Area (EEA). All data is stored and processed within these regions to ensure full compliance with UK and EU data protection laws.

9. Contact Us

If you have any questions about this policy or your personal data, you can contact us at:

Email: contact@peakstrategic.co.uk

Postal Address: Peak Strategic Consulting Ltd, Unit 29 Highcroft Industrial Estate, Enterprise Road, Horndean, Hampshire, United Kingdom, PO8 0BT

MODERN SLAVERY POLICY STATEMENT

Peak Strategic Consulting Ltd

Effective Date: 19th April 2024

Review Date: 15th April 2025

1. Introduction

Peak Strategic Consulting Ltd (“Peak Strategic”) is committed to the highest standards of ethical conduct in all areas of our business. We recognise our responsibility to prevent modern slavery and human trafficking in our operations and supply chains and take a zero-tolerance approach to any form of slavery, servitude, forced or compulsory labour, and human trafficking.

This policy sets out our position and the steps we take to identify, mitigate, and prevent modern slavery risks.

2. Our Business

Peak Strategic is a UK-based strategic consultancy focused on supporting startups and scale-ups with growth, marketing, and operational insight. While our direct operations involve primarily knowledge work and professional services, we are committed to ensuring that all aspects of our operations are free from modern slavery.

3. Our Supply Chains

Our supply chains primarily involve:

  • Freelance consultants and subcontractors

  • Software and cloud services providers

  • Marketing, design, and administrative vendors

Although our supply chain risk is relatively low due to the nature of our services, we are not complacent and aim to uphold responsible sourcing and engagement practices at all levels.

4. Our Commitments

Peak Strategic will:

  • Ensure compliance with the Modern Slavery Act 2015

  • Conduct appropriate due diligence when engaging suppliers or partners

  • Avoid working with any organisation known to engage in modern slavery

  • Require that contractors, suppliers, and partners uphold ethical labour standards

  • Include modern slavery awareness in internal policy reviews and staff onboarding where relevant

  • Promptly investigate and act on any concerns or breaches raised

5. Due Diligence and Risk Management

We assess the risk of modern slavery through:

  • Reviewing supplier practices before onboarding

  • Using trusted and verifiable service providers

  • Maintaining long-term, transparent relationships with our partners

  • Prioritising suppliers with clear anti-slavery policies

6. Reporting Concerns

Peak Strategic encourages all employees, contractors, and suppliers to report any concerns related to modern slavery. Reports can be made confidentially and without fear of retaliation to:

Email: contact@peak-strategic.com

Subject: Confidential – Modern Slavery Concern

All concerns will be taken seriously and investigated appropriately.

7. Review and Oversight

This policy is reviewed annually by the leadership team to ensure it remains fit for purpose. Any updates or improvements will be documented and communicated as appropriate.

ENVIRONMENTAL POLICY

Peak Strategic Consulting Ltd

Effective Date: 19th April 2024

Review Date: 15th April 2025

1. Our Commitment

At Peak Strategic, we recognise our responsibility to minimise our environmental impact and contribute to a more sustainable future. As a service-led consultancy, our operations have a relatively low environmental footprint — but we are committed to continuously improving our environmental performance and promoting sustainability in everything we do.

2. Objectives

We aim to:

  • Minimise waste and use of resources

  • Reduce carbon emissions associated with travel and digital operations

  • Promote remote-first and hybrid working models to cut down commuting

  • Partner with like-minded clients and suppliers who value sustainability

  • Embed environmental awareness into our business decisions and partnerships

3. Our Practices

To meet our objectives, we:

  • Operate predominantly in a digital environment to reduce paper use and physical waste

  • Avoid unnecessary travel and prioritise virtual meetings and collaboration

  • Use cloud services that demonstrate energy efficiency and carbon-conscious practices

  • Work with remote teams to reduce the need for commuting or office infrastructure

  • Choose suppliers and tools that demonstrate responsible environmental practices

4. Employee and Contractor Awareness

All team members, contractors, and partners are expected to:

  • Adopt responsible resource usage (e.g., digital-first, low-energy settings)

  • Consider environmental impact in project planning and delivery

  • Use public or low-emission transport where possible when travel is required

  • Raise awareness or flag ideas that could improve our environmental performance

5. Supply Chain and Partnerships

We consider environmental credentials when selecting suppliers and partners. Preference is given to:

  • Vendors with their own sustainability or carbon reduction policies

  • B Corps, social enterprises, or ESG-compliant organisations

  • Providers offering digital-first or paperless solutions

6. Monitoring and Improvement

We review this policy and our environmental performance annually. While we do not yet formally measure our carbon footprint, we actively:

  • Track and reduce emissions from travel and cloud service usage

  • Explore opportunities to offset our impact through verified schemes

  • Integrate sustainability goals into our long-term growth strategy

7. Responsibility and Contact

Overall responsibility for environmental performance rests with the company directors. All staff and contractors are expected to support this policy and uphold its principles.

For questions or suggestions related to our environmental approach, please contact:

Email: contact@peak-strategic.com

INFORMATION SECURITY POLICY

Peak Strategic Consulting Ltd

Effective Date: 19th April 2024

Review Date: 15th April 2025

1. Purpose

This policy outlines Peak Strategic’s approach to information security. We are committed to protecting client, company, and personal data against unauthorised access, misuse, loss, or damage.

2. Scope

This policy applies to all employees, contractors, associates, and third parties with access to Peak Strategic’s systems, tools, or data.

3. Key Principles

We follow these core principles:

  • Confidentiality – Information is accessible only to those authorised.

  • Integrity – Information remains accurate, complete, and unaltered.

  • Availability – Systems and data are available when needed.

4. Security Practices

  • All systems are secured with strong, unique passwords and multi-factor authentication where available.

  • Devices must be protected by antivirus and up-to-date software.

  • Sensitive documents must be stored in secure, access-controlled cloud environments.

  • Access to client data is restricted to those who require it for their role.

  • No data should be shared over unsecured or public networks.

  • Physical documents (where applicable) must be stored securely or destroyed.

5. Breaches or Concerns

Any suspected security incident, data breach, or unauthorised access must be reported immediately to:

Email: contact@peak-strategic.com

CLIENT CONFIDENTIALITY POLICY

Peak Strategic Consulting Ltd

Effective Date: 19th April 2024

Review Date: 15th April 2025

1. Commitment to Confidentiality

Client confidentiality is fundamental to our work. We protect all confidential, proprietary, or sensitive information shared with us during the course of business.

2. Scope

This applies to all employees, contractors, and associates who may access client information, including documents, communications, strategies, or personal data.

3. Confidential Practices

  • Confidential information is only shared on a need-to-know basis

  • It must be stored securely in encrypted, access-controlled systems

  • Physical documents are avoided unless necessary and securely destroyed when no longer needed

  • Information is never shared without written client permission, even after contracts end

4. Non-Disclosure Obligations

Our default approach is to treat all client engagements as confidential. Formal NDAs are signed where required, but confidentiality obligations apply regardless.

5. Breach or Misuse

Any suspected breach of confidentiality must be reported immediately and will be investigated with appropriate action taken.

Contact for reporting or clarification:

Email: contact@peak-strategic.com