top of page

PANGOLYN

Privacy Policy
Last updated: 2 September 2026
Pangolyn is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what personal information we collect, how we use it, who we may share it with, and the rights you have in relation to your information.
This policy applies to information collected through the Pangolyn website, www.pangolyn.co.uk, and through communications with Pangolyn.
1. Who we are
Pangolyn is a trading name of Nicholas Graham-Brown, a sole trader based in the United Kingdom.
For the purposes of UK data protection law, Nicholas Graham-Brown is the data controller responsible for your personal information.
Contact details:
Nicholas Graham-Brown trading as Pangolyn
17 Coxwell Avenue
Farnborough
GU14 6FT
United Kingdom
Email: info@pangolyn.co.uk
If you have any questions about this Privacy Policy or how your personal information is handled, you can contact us using the details above.
2. What personal information we collect
Depending on how you interact with Pangolyn, we may collect the following information:
Information you provide to us
For example, when you use our website's contact form, we may collect:

  • First name

  • Last name

  • Email address

  • Subject of your enquiry

  • The contents of your message

  • Any other information you choose to provide to us

If you become a Pangolyn client, we may also collect information necessary to provide our services, such as:

  • Your name and contact details

  • Business and organisation details

  • Project information and requirements

  • Files, images, documents and other materials you provide

  • Information relating to your website, social media or other digital platforms where relevant to the services we provide

  • Payment and invoicing information

Please do not send us sensitive personal information unless it is genuinely necessary for the service we are providing.
Information collected automatically
When you visit our website, certain technical information may be collected automatically, including information about your device, browser, approximate location, pages visited, how you interact with the website and information about how you arrived at the website.
Some of this information is collected using cookies and similar technologies. Further information is provided in the Cookies section below.
3. How we use your information
We may use personal information to:

  • Respond to enquiries and requests submitted through our website

  • Communicate with prospective and existing clients

  • Discuss and provide our services

  • Prepare quotations, proposals and contracts

  • Manage client projects and relationships

  • Provide customer support

  • Process payments and maintain business records

  • Maintain the security and functionality of our website and systems

  • Understand how visitors use our website and improve its content and functionality

  • Measure the effectiveness of our marketing and advertising

  • Send marketing communications where we have the appropriate permission or another lawful basis to do so

  • Meet our legal, accounting and regulatory obligations

  • Protect our business, website, systems and users against fraud, abuse and security threats

We will only use your personal information where we have a lawful basis for doing so.
4. Our lawful bases for processing
Under UK data protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, Pangolyn may rely on the following lawful bases:
Contract and pre-contractual steps
We may process information where this is necessary to take steps at your request before entering into a contract, or to perform a contract with you.
For example, this may apply when you contact us about our services, request a quotation or become a client.
Legitimate interests
We may process information where this is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
For example, this may include managing business enquiries, maintaining business records, improving our services, maintaining website security and communicating with existing business contacts where permitted by law.
Legal obligation
We may process personal information where necessary to comply with a legal or regulatory obligation, such as maintaining accounting and tax records.
Consent
Where required, we will ask for your consent before processing your information.
This includes the use of non-essential cookies and similar technologies, such as Google Analytics and advertising/conversion tracking technologies, where consent is required.
You can withdraw consent at any time.
5. Contact form enquiries
If you contact Pangolyn through the website, your submission is stored within Wix, our website provider.
A notification of the enquiry may also be sent to our business email account at nick@pangolyn.co.uk.
We retain contact form enquiries for 12 months from the date of the enquiry, after which they will normally be securely deleted unless we have a legitimate reason or legal obligation to retain them for longer.
If an enquiry subsequently develops into a client relationship, relevant information may be retained for the duration of the relationship and subsequently for as long as necessary to meet contractual, legal, accounting or other legitimate business requirements.
6. Marketing communications
Pangolyn may, from time to time, offer newsletters, updates, useful resources or other marketing communications.
Where we require your consent to send electronic marketing communications, we will ask you to actively opt in.
We may use Mailchimp or another suitable email marketing platform to manage marketing subscriptions and communications.
You can unsubscribe from marketing communications at any time by using the unsubscribe facility provided in the communication or by contacting us at info@pangolyn.co.uk.
We will not sell or rent your personal information to third parties for their own marketing purposes.
7. Cookies and similar technologies
The Pangolyn website uses cookies and similar technologies.
Some cookies are strictly necessary for the website to operate securely and correctly. These do not require consent.
We also use analytics cookies, including Google Analytics, to understand how visitors use the website and to help us improve it. These cookies are non-essential and will only be used where you have given the appropriate consent.
We may also use Google Ads conversion tracking to understand whether advertising campaigns result in visits or enquiries. Where this involves non-essential cookies or similar tracking technologies, these will only be activated with the appropriate consent.
Cookies currently used by the website
The website may use the following categories of cookies:
Strictly necessary / essential cookies
These include Wix cookies used for functions such as:

  • Website security

  • Session management

  • Load balancing

  • Site functionality

  • Protection against malicious traffic

  • Remembering cookie-consent preferences

The Wix cookie scan currently identifies cookies including client-session-bind, server-session-bind, ssr-caching, XSRF-TOKEN, hs, svSession, bSession and consent-policy.
Analytics cookies
Google Analytics currently uses cookies including:

  • _ga

  • _ga_*

These are used to distinguish visitors and sessions and to provide information about website usage and performance.
The precise cookies used by the website may change as we add, remove or update website functionality. Our cookie-management system is used to help identify and manage these technologies.
You can change or withdraw your cookie preferences using the cookie settings provided on the website.
The use of non-essential cookies is subject to the requirements of applicable UK privacy and electronic communications law.
8. Google Analytics and Google Ads
We use Google Analytics to understand how visitors interact with the Pangolyn website, including information such as pages viewed, approximate geographical information, traffic sources and general website usage.
We may also use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns, such as whether visitors who arrive through an advertisement subsequently submit an enquiry.
These technologies may involve information being processed by Google and may involve the transfer of information outside the UK.
Where consent is required for the relevant cookies or tracking technologies, these will only be activated after you have provided consent.
You can manage your preferences through the cookie controls on our website.
9. Service providers and third parties
Pangolyn uses a number of third-party services and software providers to operate its business and provide services to clients.
Depending on how you interact with Pangolyn, these may include:

  • Wix – website hosting and website functionality

  • Microsoft 365 – business email, documents and business administration

  • Dropbox – storage and sharing of files

  • Adobe – creative and document-production software

  • Canva – design and content-production tools

  • HubSpot – customer relationship and marketing management, where applicable

  • Mailchimp – email marketing, where applicable

  • Google – analytics, advertising and related services

  • LinkedIn and Instagram – social media and business communications

We only provide third parties with the information reasonably necessary for them to provide their services, and we expect them to handle personal information in accordance with applicable data protection requirements.
We may also disclose personal information where necessary to comply with a legal obligation, protect our rights or property, prevent fraud or abuse, or protect the safety and security of our business, clients or website users.
We do not sell personal information.
10. International transfers
Some of the service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place, in accordance with applicable UK data protection law.
11. Client data and our role as a data processor
In the course of providing services, Pangolyn may sometimes process personal information belonging to our clients' customers, employees, audiences or other contacts.
Where Pangolyn processes personal information on a client's instructions and on the client's behalf, the client will generally remain the data controller and Pangolyn will act as a data processor.
In these circumstances, Pangolyn will only process the information in accordance with the client's instructions and the terms of the relevant agreement.
Where appropriate, a separate Data Processing Agreement (DPA) will be put in place between Pangolyn and the client.
This Privacy Policy primarily concerns personal information for which Pangolyn is itself the data controller.
12. How long we keep personal information
We do not keep personal information indefinitely.
Our retention period depends on why we collected the information and whether there is an ongoing relationship with you.
For example:

  • Website contact enquiries are normally retained for 12 months.

  • Client information is retained for as long as necessary to provide our services and subsequently for as long as required for legitimate business, legal, accounting or regulatory purposes.

  • Marketing subscription information is retained while you remain subscribed, or until you withdraw your consent where consent is the lawful basis.

  • Cookie-consent records may be retained for an appropriate period to demonstrate and manage your consent preferences.

When information is no longer required, we will securely delete it or anonymise it where appropriate.
13. How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures include using reputable third-party service providers, appropriate account security, access controls and secure cloud-based systems.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
14. Your data protection rights
Under UK data protection law, you may have the right to:

  • Ask for a copy of the personal information we hold about you

  • Ask us to correct inaccurate or incomplete information

  • Ask us to delete your personal information in certain circumstances

  • Ask us to restrict how we use your information in certain circumstances

  • Object to certain types of processing, including processing based on legitimate interests

  • Receive certain information in a portable format

  • Withdraw consent where we rely on consent to process your information

These rights are subject to certain legal exceptions and limitations.
If you wish to exercise any of these rights, please contact:
info@pangolyn.co.uk
We may need to ask for information to verify your identity before responding to a request.
We will normally respond to valid requests within one month, although this may be extended where legally permitted for particularly complex requests.
15. Complaints
If you have concerns about how Pangolyn has handled your personal information, please contact us first at:
info@pangolyn.co.uk
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).
You can find information about making a complaint on the ICO's website.
Information Commissioner's Office (ICO)
16. Children's information
The Pangolyn website and services are intended primarily for businesses and adults.
We do not knowingly collect personal information from children through the website.
If you believe that a child has provided personal information to us, please contact us so that we can investigate and, where appropriate, delete the information.
17. Automated decision-making
Pangolyn does not currently use personal information to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or the way we process personal information.
The latest version will always be published on this page, with the date of the most recent update shown at the top.

bottom of page