Privacy Policy

Last updated: 31 Oct 2026

Transformerpreneur respects your privacy and aims to be clear about how personal information is collected, used, stored, and shared. This Privacy Policy applies to transformerpreneur.com, Transformerpreneur, CONTINUUM, and related services, enquiries, communications, bookings, marketing, and service-delivery systems operated by Transformerpreneur.com Ltd.

1. Who we are

Transformerpreneur is operated by:

Transformerpreneur.com Ltd
Company number: 06870457
Registered in England and Wales
Registered office: Brechfa House, Brechfa, Carmarthen, SA32 7RA, United Kingdom

Transformerpreneur.com Ltd is the data controller responsible for the personal information described in this policy.

You can contact us about privacy or data protection at:

richard@transformerpreneur.com

You can also contact us through the contact details provided on this website.

2. The information we collect

The information we collect depends on how you interact with us.

It may include:

  • your name;

  • business or organisation name;

  • email address;

  • telephone number;

  • postal or billing address where required;

  • job title, professional role, or business information;

  • information you provide in an enquiry, form, application, questionnaire, booking, email, call, meeting, or other communication;

  • information relating to services you are considering, purchasing, or receiving;

  • appointment and scheduling information;

  • transaction and payment-related information;

  • marketing preferences and consent records;

  • correspondence and relationship history;

  • documents, files, notes, or other material you choose to provide to us;

  • information about how you use our website, including pages visited, referral source, browser, device, approximate location, IP address, and similar technical information;

  • information generated through analytics, advertising, and attribution systems where these have been enabled and any consent required by law has been obtained; and

  • relevant professional or business information obtained from legitimate public sources.

We do not normally receive or store your complete payment-card details. Payments are generally processed by specialist payment providers such as Stripe.

3. Information obtained from other sources

Most personal information comes directly from you.

We may also obtain relevant information from other legitimate sources, including:

  • your business or organisation's website;

  • publicly available professional profiles;

  • public company and business registers;

  • social or professional networks;

  • public directories;

  • publicly available publications, documents, interviews, media, or other business information;

  • referrals or introductions;

  • service providers involved in a transaction, appointment, or communication with you; and

  • information already held through an existing business relationship.

For CONTINUUM and related business-development activity, we may review publicly available information about a business, its services, public presence, market, systems, and relevant professional contacts to understand the organisation, prepare for a conversation, assess whether our services may be relevant, or prepare useful working material.

The fact that information is publicly available does not remove our obligations under data-protection or electronic-marketing law.

We aim to collect and retain only information that is reasonably relevant to the purpose for which it is being used.

4. How and why we use personal information

We only use personal information where we have a lawful reason to do so.

Enquiries and pre-contract discussions

We use information to:

  • respond to enquiries;

  • understand what you need;

  • prepare for calls or meetings;

  • research relevant business context;

  • provide information, proposals, previews, or recommendations; and

  • take steps you ask us to take before entering into an agreement.

Our lawful basis will normally be contract, including steps taken at your request before entering into a contract, or our legitimate interests where appropriate.

Providing our services

We use information to:

  • provide agreed services;

  • communicate with you;

  • manage appointments and projects;

  • research and prepare work relevant to your business;

  • personalise our work where appropriate;

  • administer the customer or client relationship;

  • provide support;

  • maintain appropriate records; and

  • manage payments and accounts.

Our lawful basis will normally be contract, legal obligation, and, where appropriate, our legitimate interests in operating and improving the business.

Operating and improving the business

We may use information to:

  • administer our website and systems;

  • understand the effectiveness of our services and processes;

  • maintain security;

  • prevent fraud and misuse;

  • troubleshoot problems;

  • improve our services, communications, technology, and customer experience;

  • develop and test business processes and systems;

  • measure business and marketing performance;

  • maintain appropriate business records; and

  • establish, exercise, or defend legal rights.

We normally rely on our legitimate interests where those interests are not overridden by your rights and interests, or on legal obligation where applicable.

Where we rely on legitimate interests, we consider the purpose of the processing, whether the processing is necessary, and its likely effect on you.

Marketing and business development

We may use personal information to communicate with people about relevant Transformerpreneur or CONTINUUM services, ideas, resources, events, opportunities, or developments.

Depending on the circumstances, we rely on consent or legitimate interests, together with the additional requirements of applicable electronic-marketing law.

You can opt out of marketing at any time.

We do not treat an enquiry, booking, purchase, download, acceptance of this Privacy Policy, or use of our website as automatic consent to receive unrelated electronic marketing.

5. AI and automated systems

Transformerpreneur and CONTINUUM make practical use of artificial intelligence and automation as part of how we research, prepare, analyse, organise, communicate, and deliver our work.

We currently use services provided by organisations such as OpenAI and may use other suitable AI, machine-learning, automation, research, transcription, document-processing, or productivity providers as our technology stack develops.

AI technologies may help us:

  • research and organise publicly available business information;

  • analyse information supplied to us;

  • prepare for meetings or service delivery;

  • summarise, classify, structure, or organise material;

  • identify patterns, relationships, or relevant context;

  • draft or personalise communications and working material;

  • support business and commercial analysis;

  • generate, transform, or review documents and other working outputs;

  • automate routine administrative and operational processes; and

  • improve the consistency and usefulness of our services.

Where personal information is processed through an AI or automation provider, that provider may act as a processor, sub-processor, or, in some circumstances, an independent controller responsible for its own processing.

We aim to provide these systems only with information that is reasonably necessary for the task and to avoid unnecessary disclosure of sensitive, confidential, or unrelated personal information.

We use human judgement and review where this is materially required.

Unless we specifically tell you otherwise, we do not use solely automated decision-making to make decisions about you that produce legal or similarly significant effects.

Our technology providers and individual AI models may change over time. We do not update this policy merely because we replace, add, or remove a provider where the nature and purpose of the processing remain materially the same.

We will update this policy, or provide additional information where appropriate, where a change materially affects how we use personal information, the purposes for which we use it, the privacy risks involved, or your rights.

6. Cookies and similar technologies

Our website may use cookies, pixels, scripts, tags, local storage, and similar technologies.

Some are necessary for the website to function, for example for security, preferences, essential functionality, or communication between website components.

Others may be used for purposes such as:

  • website analytics;

  • measuring traffic and website performance;

  • understanding how visitors reach and use the site;

  • remembering preferences;

  • measuring marketing effectiveness;

  • advertising and remarketing; and

  • attribution between website activity and later enquiries, bookings, or other business events.

Where consent is legally required, these technologies should not be activated until you have made an appropriate choice through our cookie or consent controls.

You can change or withdraw your choices through the website's available cookie settings.

Blocking some technologies may affect optional website features, but refusing optional analytics or advertising cookies should not prevent you from accessing the core website.

7. Analytics and advertising

We may use analytics, attribution, and advertising services to understand the effectiveness of our website, communications, and marketing.

Depending on the systems currently enabled, these providers may receive information such as:

  • browser or device identifiers;

  • IP address;

  • website activity;

  • referring pages;

  • approximate location;

  • advertising identifiers; and

  • information about actions such as an enquiry, booking, or other conversion event.

Where required, we use these systems only after obtaining appropriate consent.

Some measurement may also be based on operational events recorded within our own systems rather than browser tracking.

We do not sell personal information for money.

Some jurisdictions use broader legal definitions of the “sale”, “sharing”, or use of personal information for targeted advertising. Where such laws apply to our processing, we will provide any additional notices and controls required by those laws.

8. Email and other direct marketing

We may send marketing communications where you have consented to receive them or where another lawful basis or legal exception applies.

For example, UK law may allow us to contact an existing customer about our own similar products or services where the requirements of the customer “soft opt-in” are met.

Every marketing email should provide a straightforward way to unsubscribe.

If you unsubscribe or object to direct marketing, we may retain limited information on a suppression list so that we can respect your request and avoid contacting you again inadvertently.

Business contact details being publicly available do not, by themselves, constitute consent to electronic marketing.

9. Who we share information with

We do not sell lists of customers, prospects, or subscribers.

We may share personal information with trusted organisations that help us operate our business and provide our services.

These providers change over time as our systems and services develop. They may include:

  • website hosting, content-management, form, and website-service providers, currently including services such as Squarespace;

  • email marketing, lead-capture, newsletter, and customer-communication providers, currently including services such as GetResponse;

  • appointment and scheduling providers, currently including services such as Acuity Scheduling;

  • payment and transaction providers, currently including services such as Stripe;

  • workflow, integration, and automation providers, currently including services such as Make;

  • databases, CRM-style systems, project-management, knowledge-management, and operational-workspace providers, currently including services such as Notion;

  • cloud-storage, document-management, productivity, and collaboration providers, currently including services such as Dropbox, Google Workspace, and Google Drive;

  • artificial-intelligence, machine-learning, research, transcription, document-processing, and related technology providers, currently including services such as OpenAI;

  • email, messaging, video-conferencing, and other communications providers;

  • analytics, advertising, attribution, and website-measurement providers;

  • accounting, banking, insurance, legal, professional, and administrative providers;

  • IT, hosting, security, authentication, backup, and infrastructure providers; and

  • other specialist providers reasonably required to operate the business or provide our services.

The named providers above are examples of significant services currently or commonly used by us. They are not intended to be a complete or permanent list.

We may change providers, use additional providers, or replace one service with another where appropriate.

We will not normally update this policy solely because a supplier changes if the underlying purpose, categories of personal information involved, and nature of the processing remain materially the same.

Where a new provider or processing activity materially changes how personal information is used, creates a new significant privacy impact, or requires additional information to be given to you by law, we will update this policy or provide a separate privacy notice where appropriate.

These organisations may act as processors on our behalf or, in some cases, as independent controllers responsible for their own processing.

We may also disclose information where reasonably necessary to:

  • comply with law or regulation;

  • respond to lawful requests from authorities;

  • protect our rights or the rights of others;

  • prevent or investigate fraud, abuse, or security incidents;

  • establish, exercise, or defend legal claims; or

  • deal with a business restructuring, acquisition, sale, merger, or transfer.

10. International transfers

Some of the technology and service providers we use operate internationally or store, access, or process information outside the United Kingdom.

This may include cloud, communications, AI, automation, analytics, storage, and other technology providers.

Where UK data-protection law treats this as a restricted international transfer, we use an appropriate lawful transfer mechanism where required.

Depending on the provider and destination, this may include:

  • UK adequacy regulations;

  • an applicable recognised international data-transfer framework;

  • approved contractual safeguards, including the UK International Data Transfer Agreement or UK Addendum where appropriate;

  • contractual and organisational safeguards used by our service providers; or

  • another lawful transfer mechanism available under applicable data-protection law.

The appropriate mechanism depends on the provider, destination, type of information, and circumstances.

Our providers, their processing locations, and the lawful mechanisms available for international transfers may change over time. We do not update this policy merely because a provider changes its infrastructure or processing location where the underlying processing remains materially the same and appropriate legal safeguards continue to apply.

11. How long we keep information

We do not keep personal information indefinitely simply because it might be useful.

Retention depends on:

  • why the information was collected;

  • whether an active or potential business relationship continues;

  • contractual requirements;

  • legal, tax, accounting, insurance, and regulatory requirements;

  • whether information is required to resolve a dispute or establish, exercise, or defend legal rights;

  • consent and marketing preferences;

  • security, fraud-prevention, and audit requirements; and

  • whether the information can instead be securely deleted or anonymised.

Financial, transaction, tax, and accounting information may need to be retained for several years in accordance with applicable UK legal and tax requirements.

Information relating to a client or customer relationship may be retained for an appropriate period after that relationship ends where required for contractual, professional, insurance, accounting, legal, or legitimate business purposes.

Marketing information is normally retained until you unsubscribe, withdraw consent where consent applies, object to direct marketing, or we determine that continuing to hold it is no longer justified.

We may retain a minimal suppression record after an opt-out.

Information relating to an enquiry or prospective relationship is periodically reviewed and deleted or anonymised when it is no longer reasonably required.

Backups and archived systems may retain information for a limited additional period before it is overwritten or deleted through normal system processes.

12. Security

We use reasonable technical and organisational measures intended to protect personal information against:

  • unauthorised access;

  • accidental loss;

  • alteration;

  • disclosure;

  • misuse; and

  • destruction.

These measures may include:

  • controlled account access;

  • authentication and multi-factor authentication;

  • access permissions;

  • encrypted connections;

  • secure cloud services;

  • backups;

  • separation of operational accounts where appropriate;

  • monitoring and security controls; and

  • the use of established specialist service providers.

Access to personal information is limited where reasonably practicable to people, systems, and providers that need it for a legitimate purpose.

No online or electronic system can be guaranteed to be completely secure.

13. Your rights

Depending on the circumstances and applicable law, you may have the right to:

  • be informed about how your information is used;

  • obtain access to your personal information;

  • have inaccurate information corrected;

  • have incomplete information completed;

  • have information erased in certain circumstances;

  • restrict how information is used;

  • object to certain processing;

  • receive certain information in a portable form;

  • withdraw consent where processing relies on consent; and

  • receive appropriate safeguards in relation to certain automated decisions.

You also have an absolute right to object to your personal information being used for direct marketing.

Some rights depend on the lawful basis for processing and are not absolute.

To exercise a privacy right, contact:

richard@transformerpreneur.com

We may need to ask for enough information to confirm your identity, understand your request, and locate the relevant records.

We will normally respond within the period required by applicable data-protection law.

If privacy laws in your country or region give you additional rights that apply to our processing, you may also contact us to exercise those rights.

14. Data-protection complaints

If you are concerned about the way we have collected or used your personal information, please contact us so that we can investigate.

You can make a data-protection complaint at:

richard@transformerpreneur.com

We will acknowledge a data-protection complaint within 30 days, take appropriate steps to investigate it, keep you informed where necessary, and communicate the outcome without undue delay.

You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office (ICO)
www.ico.org.uk

You do not need our permission before contacting the ICO.

If another data-protection authority has jurisdiction over our processing of your personal information, you may also have the right to complain to that authority.

15. Children

Transformerpreneur and CONTINUUM are primarily business and professional services and are not directed at children.

We do not knowingly seek to collect personal information from children through this website for marketing or general business-development purposes.

If you believe that a child has provided personal information to us inappropriately, please contact us.

16. Sensitive information

Please do not provide sensitive personal information unless it is genuinely necessary for the relevant service or we specifically ask for it.

Certain types of personal information receive additional protection under data-protection law, including information concerning matters such as health, racial or ethnic origin, religious or philosophical beliefs, political opinions, trade-union membership, genetic or biometric identification, or a person's sex life or sexual orientation.

Where we need to process information receiving special protection under data-protection law, we will ensure that an appropriate lawful basis and any additional legal condition required for that processing applies.

We aim to minimise the inclusion of sensitive personal information in AI systems, automation, analytics, and other third-party technology unless it is reasonably necessary and appropriate for the relevant purpose.

17. Confidential and business information

Some information supplied to us may concern a business, organisation, project, strategy, systems, finances, intellectual property, or other confidential material rather than personal information.

Data-protection law does not necessarily apply to information merely because it is commercially confidential. However, where such material also contains personal information, this Privacy Policy applies to that personal information.

We aim to handle client and prospect material proportionately and to avoid unnecessary disclosure to third parties or technology systems.

Any additional contractual confidentiality obligations agreed with you apply alongside this Privacy Policy.

18. Third-party websites and services

Our website, communications, or services may link to websites, booking systems, payment services, documents, platforms, or other services operated by third parties.

Those organisations are responsible for their own privacy practices where they act as independent controllers.

Their privacy policies should explain what they collect and how they use it.

A link, embed, integration, or connection from our website does not necessarily mean that we control the privacy or security practices of the linked service.

19. Business changes

If Transformerpreneur.com Ltd, Transformerpreneur, CONTINUUM, or part of the business is restructured, merged, acquired, sold, transferred, or reorganised, relevant personal information may form part of that transaction or transfer.

Where this happens, we will take appropriate steps to protect personal information and provide additional information where required by law.

20. Changes to this policy

Our services, technology, providers, and business processes will continue to evolve.

We may therefore update this Privacy Policy from time to time.

We do not intend to revise it every time we introduce, replace, or discontinue an individual software provider, AI model, cloud service, or other supplier where the nature and purpose of the underlying processing remain materially the same.

We will review and update the policy where appropriate if there is a material change to:

  • the purposes for which we use personal information;

  • the categories of information we collect;

  • the way personal information is processed;

  • a significant privacy risk;

  • your rights;

  • our legal obligations; or

  • other information we are required by law to provide.

The current version will be published on this page with its latest revision date.

Where a significant change affects how existing personal information is used, we will take appropriate steps to bring that change to the attention of affected people before the new use begins where required.

21. Contact

For questions, privacy requests, objections to marketing, or data-protection complaints, contact:

Transformerpreneur.com Ltd
Brechfa House
Brechfa
Carmarthen
SA32 7RA
United Kingdom

richard@transformerpreneur.com

Company number: 06870457