Privacy Policy
This policy explains how PearsonGoldman handles personal information when people use this website, submit an enquiry or contact us directly.
Who is responsible
Last updated: 21 September 2026.
PearsonGoldman Ltd is the data controller for the personal information described in this policy. Privacy and data-protection enquiries can be sent to legal@pearsongoldman.com.
PearsonGoldman Ltd is registered with the Information Commissioner's Office. ICO registration: ZC236782.
Postal privacy correspondence should be addressed to PearsonGoldman Ltd, 124 City Road, London, England, EC1V 2NX.
Information we collect
When you use the contact form or email PearsonGoldman, we may receive your full name, work email address, organisation, optional role or job title, enquiry type, enquiry message, direct email information, correspondence and follow-up records.
The website does not ask for special-category personal information, criminal-offence information, payment-card information, identity documents or confidential client documentation. Please do not include confidential, commercially sensitive or special-category personal information in the enquiry form.
The contact form also uses limited technical and security information, including a short-lived form token, a honeypot field, origin checks, payload controls, rate-limiting controls, submission IDs and request outcome logs. Limited network and security information, which may include an IP address or derived identifier, may be processed temporarily for rate limiting, abuse prevention and service security. Raw IP addresses are not retained in application logs.
Client scheduling
Our client scheduling page uses a PearsonGoldman booking interface. Availability is checked through our server against Microsoft Bookings. When you confirm a meeting, the details you provide are sent from our server to Microsoft Bookings within Microsoft 365 to arrange the appointment and related correspondence. The booking page does not embed Microsoft's browser application.
We ask for your first name, surname and email address. Phone number, company and discussion notes are optional. Please do not include confidential, commercially sensitive or special-category personal information in the notes. Appointment information is handled within Microsoft 365 and Exchange; retention depends on the purpose of the meeting and the applicable business-record requirements.
Our server uses short-lived security controls and a limited duplicate-request record to protect booking submissions. The duplicate-request record contains technical references and salted request fingerprints, not the full customer details or message. The privacy contact and rights described in this policy also apply to information you provide through scheduling. See the Microsoft Privacy Statement for information about Microsoft's processing.
Sources
Information is collected mainly from form submissions, direct emails and later business correspondence. PearsonGoldman does not use this website to collect personal information from purchased lists or data brokers.
Purposes and lawful bases
| Purpose | Lawful basis | Details |
|---|---|---|
| Individual requesting services personally | Steps requested by the individual before entering into a contract, where this basis genuinely applies. | Used where an individual asks PearsonGoldman to consider services for them personally. |
| Representative making a business enquiry | Legitimate interests in reviewing and responding to relevant business enquiries and developing potential business relationships. | Used to review the enquiry, decide whether PearsonGoldman can help and respond. |
| Managing correspondence and potential relationships | Legitimate interests in operating the consultancy, maintaining business records and following up relevant discussions. | Used for proportionate business follow-up and record keeping. |
| Website and form security | Legitimate interests in protecting the website, preventing misuse and maintaining service reliability. | Used for anti-spam, validation, origin, payload and rate-limit controls. |
| Legal and regulatory obligations | Legal obligation where processing is necessary to meet applicable law, regulatory requirements or lawful requests. | Used only where relevant obligations arise. |
Marketing
Submitting an enquiry does not subscribe you to a marketing list. PearsonGoldman does not currently operate a newsletter or marketing list through this form. Contact information will not be used for unrelated electronic marketing without an appropriate lawful route and PECR compliance. If direct marketing is introduced later, individuals may object at any time.
Sharing and processors
Enquiries may be handled using Microsoft Azure and Azure Communication Services when production delivery is configured, email and productivity providers, hosting and technical service providers, professional advisers where necessary, regulators, courts or public authorities where legally required, and approved delivery partners only where necessary for the relevant enquiry and with appropriate controls.
PearsonGoldman does not sell personal information.
International transfers
Some service providers may process information outside the UK. Where this occurs, appropriate safeguards will be used as required by UK data-protection law. Details may be requested through the privacy contact.
Retention
| Record type | Retention approach |
|---|---|
| General enquiries that do not become a client relationship | Up to 24 months after the last meaningful contact, unless a shorter period is appropriate or longer retention is required for a legal reason. |
| Enquiries that lead to a client, supplier or partner relationship | Transferred into the relevant business record and retained according to the applicable contractual, accounting, tax, legal and limitation requirements. |
| Security and operational logs | Normally up to 90 days, unless a security incident or legal requirement justifies longer retention. |
| Rejected spam and temporary form controls | No enquiry content is retained by the website application. Temporary tokens and in-memory controls expire automatically. |
Security
PearsonGoldman uses proportionate controls intended to protect enquiry information, including access controls, environment-based secrets, server-side validation, anti-spam controls, limited logging, secure service providers, review and incident handling. No website or email system can be guaranteed to be completely secure.
Your rights
Depending on the circumstances and lawful basis, UK data protection law may give you rights to access, correct, erase, restrict or object to use of your personal information, data portability, and withdrawal of consent where consent is used. You can contact legal@pearsongoldman.com.
Data protection complaints
You can raise a complaint about how PearsonGoldman handles your personal information by emailing legal@pearsongoldman.com and marking the message "Data Protection Complaint". We will acknowledge the complaint within 30 days, investigate it appropriately, keep you informed where necessary and communicate the outcome without undue delay. You may also complain to the Information Commissioner's Office.
Automated decisions
PearsonGoldman does not use website enquiry information for solely automated decisions that produce legal or similarly significant effects.
Children
This website and PearsonGoldman's consultancy services are directed to business users and are not intended for children.
Changes and contact
This policy may be updated as the website, services, processors or legal requirements change. Privacy questions can be sent to legal@pearsongoldman.com.