Last updated: 10 August 2026. This notice explains what happens to personal data collected through this website, and how we use cookies. It is written to be accurate and in plain English, but it is not a substitute for independent legal advice, and should be reviewed by a solicitor before the site goes live if you want that additional assurance.
This website is operated by Tazkeya Khan, trading as People Capability & Co., of [CONFIRM: registered or trading address — a UK GDPR notice must give an address, not just an email]. We are the data controller for the personal data described in this notice. Contact: info@peoplecapability.uk.
We are not currently required to have a Data Protection Officer, and none is appointed. [CONFIRM: if you register with the ICO, add your ICO registration number here.]
When you submit the enquiry form on this website, we collect what you provide: name, work email, company, role, approximate number of employees, website (optional), a short description of your business challenge, preferred contact method (optional), phone number (optional), and any message you include.
If you email us directly or book a call through our Calendly link, we also hold whatever information you share in that email or booking, and Calendly's own privacy notice governs the booking itself once you leave this site.
We do not collect financial, health, or other special category data through this site, and ask that you don't include it in the enquiry form.
We process enquiry data to respond to you and assess whether we can help with the challenge you've described. Our legal basis is legitimate interests — specifically, our interest in running a responsive advisory practice — balanced against your right to privacy; where you go on to become a client, further processing is based on performance of a contract. Where you've ticked the consent box on the form, that consent covers us contacting you about your enquiry specifically, and can be withdrawn at any time by emailing us.
We use a small number of service providers (data processors) to run this site and respond to enquiries. We don't sell, rent, or share your data for third-party marketing.
Netlify's and HubSpot's standard data processing terms apply to their handling of this data on our behalf. We may also disclose data where required by law.
Our CRM (HubSpot) is hosted in the EU. Netlify and Calendly may process data outside the UK; where they do, they rely on their own approved safeguards (such as UK/EU-recognised standard contractual clauses) — see each provider's own privacy notice for detail.
Enquiry data is retained for 24 months from the date of your last contact with us, or for the duration of any resulting client relationship plus the period required for our legal and accounting obligations thereafter, after which it is deleted or anonymised. If you ask us to delete your data sooner, we will do so unless we're required to keep it (for example, for accounting records relating to a paid engagement).
We use a cookie banner so you can choose which categories of cookies apply to your visit. You can change your choice at any time using the cookie preferences link below, or in the footer of every page.
| Category | Purpose | Consent required? |
|---|---|---|
| Strictly necessary | Core site functionality and remembering your cookie choice. No third-party tracking cookies are set in this category. | No — exempt under PECR |
| Analytics | Not currently in use. If added (e.g. a privacy-friendly visitor-count tool), it will only run if you say yes here. | Yes, when added |
| Marketing | Not currently in use. If added (e.g. a LinkedIn or retargeting pixel), it will only run if you say yes here. | Yes, when added |
This site also loads fonts from Google Fonts' servers, which transmits your IP address to Google as a technical part of delivering the font files; Google does not use this for advertising or tracking, and no cookie is set as part of this.
Under UK GDPR, you have the right to: ask what personal data we hold about you; request a copy of it (subject access); ask us to correct inaccurate data; ask us to delete it; ask us to restrict processing; object to processing based on legitimate interests; and withdraw consent at any time where consent is our basis for processing. To exercise any of these rights, email info@peoplecapability.uk. We will respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to resolve it directly first.
This website and its services are intended for business use by adults. We do not knowingly collect data from children.
We may update this notice from time to time, for example as we add new tools or services. The "last updated" date at the top of this page reflects the most recent revision.
Questions about this notice, or about your data, can be sent to info@peoplecapability.uk.