Privacy notice

1. Who we are

Portfolio Twenty One Group Ltd is the controller of the personal data described in this notice. We are a company registered in England and Wales, company number 16713805. Our registered office is Unit U10, Base Business Space, Chamberlain Road, Hull, HU8 8HL.

For any data protection question, email info@portfoliotwenty.one.

2. What we collect

We collect only the information you choose to send through the opportunity form on this website:

• your name;
• your email address;
• your business sector;
• your annual revenue band;
• your reason for enquiry;
• any details you write in the form.

Our hosting provider keeps standard server logs (IP address, browser type, pages requested, date and time) for security and fault finding. We keep these for no longer than 90 days.

To stop automated abuse of the form, our server keeps a one-way coded (hashed) version of your IP address for one hour. It is not used to identify you, and it is deleted automatically after that hour.

Please do not include sensitive information, such as health information, in the form.

3. Why we use it and our lawful basis

• To assess and respond to your enquiry about selling, partnering or working with the group. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)). Our legitimate interest is to consider business opportunities and to reply to the people who contact us.
• To comply with legal obligations where they arise. Our lawful basis is legal obligation (UK GDPR Article 6(1)(c)).
• To keep this website and the form secure. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)).

4. Who sees your information

Your information is seen by the directors and advisers of the group. Where it is relevant to your enquiry, it may also be shared with group companies, currently The Livewell Syndicate Ltd and Hevolve Health Ltd.

We use these suppliers:

• Our email is provided by Google Workspace (Google Ireland Limited). Enquiries sent through the form are delivered to and stored in that mailbox.
• Our website is hosted by Krystal Hosting Ltd in the United Kingdom.

We do not sell personal data. We do not build marketing lists. We do not use your information for profiling or to make automated decisions about you.

5. How long we keep it

We keep enquiry data for 24 months after our last contact with you. We then delete it.

If a transaction proceeds, your information becomes part of the transaction records. Our deal submission terms explain how long we keep those records.

The hashed IP record used to protect the form is deleted after one hour. Server logs are kept for no longer than 90 days.

6. International transfers

We do not intend to transfer your personal data outside the United Kingdom. If a supplier processes it outside the United Kingdom, we rely on UK adequacy regulations or the International Data Transfer Agreement to protect it.

7. Your rights

You have the right to:

• access the personal data we hold about you;
• ask us to correct it (rectification);
• ask us to delete it (erasure);
• ask us to restrict how we use it;
• object to our use of it;
• receive it in a portable format (portability).

Some of these rights apply only in certain circumstances. To use any of them, email info@portfoliotwenty.one. We may ask you to confirm your identity. We will reply within one month.

You also have the right to complain to the Information Commissioner’s Office at ico.org.uk. We would welcome the chance to resolve your concern first.

8. Children

This website is not directed at anyone under the age of 18. We do not knowingly collect personal data from children.

9. Cookies

This website sets no cookies for visitors. Our cookie policy explains more.

10. Changes to this notice

When this notice changes, we will update this page and the date at the top.