Book a Session

Last updated: 7 October 2026

Privacy policy

Privacy policy

1. Who we are
1. Who we are
1. Who we are

Project Advisory Solutions (“PAS”, “we”, “us”, “our”) is a business development, IT advisory, sourcing and lead generation consultancy based in Scotland, United Kingdom.

Our website, https://www.projectadvisorysolutions.com, provides information about our services and enables businesses to contact us regarding advisory, sourcing, partnership and client-introduction opportunities.

For the purposes of UK data protection law, Project Advisory Solutions is the data controller where we determine how and why personal data is processed.

Contact information

Project Advisory Solutions
36 Melvinhall Road
Lanark
Scotland
ML11 7AU

Email: info@projectadvisorysolutions.com

Company registration no. SC805671

We have not appointed a Data Protection Officer.

Project Advisory Solutions (“PAS”, “we”, “us”, “our”) is a business development, IT advisory, sourcing and lead generation consultancy based in Scotland, United Kingdom.

Our website, https://www.projectadvisorysolutions.com, provides information about our services and enables businesses to contact us regarding advisory, sourcing, partnership and client-introduction opportunities.

For the purposes of UK data protection law, Project Advisory Solutions is the data controller where we determine how and why personal data is processed.

Contact information

Project Advisory Solutions
36 Melvinhall Road
Lanark
Scotland
ML11 7AU

Email: info@projectadvisorysolutions.com

Company registration no. SC805671

We have not appointed a Data Protection Officer.

2. Scope
2. Scope
2. Scope

This Privacy Policy explains how we collect, use, store and protect personal data when you:

  • visit our website;

  • contact or communicate with PAS;

  • engage with us as a client, supplier, partner or prospective partner;

  • are introduced to us as part of a business opportunity;

  • are identified by PAS as a relevant business contact or prospect; or

  • receive business-to-business communications from us.

This Policy applies to personal data processed by PAS in connection with our business activities.

This Privacy Policy explains how we collect, use, store and protect personal data when you:

  • visit our website;

  • contact or communicate with PAS;

  • engage with us as a client, supplier, partner or prospective partner;

  • are introduced to us as part of a business opportunity;

  • are identified by PAS as a relevant business contact or prospect; or

  • receive business-to-business communications from us.

This Policy applies to personal data processed by PAS in connection with our business activities.

3. What personal data we collect
3. What personal data we collect
3. What personal data we collect

The personal data we collect depends on how you interact with PAS.

Website visitors

We may collect:

  • IP address;

  • device and browser information;

  • referring pages;

  • pages viewed and time spent on the website;

  • cookie identifiers; and

  • website analytics information.

Clients, suppliers, partners and people who contact us

We may collect:

  • name;

  • company name;

  • job title or professional role;

  • business email address;

  • personal email address where voluntarily provided;

  • telephone or WhatsApp contact details;

  • business location and country;

  • information contained in correspondence with us;

  • information about your organisation, services and requirements;

  • technology requirements, project information or purchasing requirements;

  • target markets, budgets or partnership preferences where relevant; and

  • other information you choose to provide to us.

Business prospects

PAS may identify and contact relevant people within organisations where we reasonably believe our services, information, resources or technology-provider network may be relevant to their professional role or organisation.

For this purpose, we may collect:

  • name;

  • job title and professional role;

  • company name;

  • business email address;

  • business telephone number where available;

  • LinkedIn or other professional profile URL;

  • company website or domain;

  • business location;

  • company size, industry or sector; and

  • other relevant professional or company information.

This information may be obtained from third-party business data providers, professional networking platforms, company websites, business directories and other publicly available professional or business sources.

We do not rely solely on information voluntarily provided directly to PAS.

The personal data we collect depends on how you interact with PAS.

Website visitors

We may collect:

  • IP address;

  • device and browser information;

  • referring pages;

  • pages viewed and time spent on the website;

  • cookie identifiers; and

  • website analytics information.

Clients, suppliers, partners and people who contact us

We may collect:

  • name;

  • company name;

  • job title or professional role;

  • business email address;

  • personal email address where voluntarily provided;

  • telephone or WhatsApp contact details;

  • business location and country;

  • information contained in correspondence with us;

  • information about your organisation, services and requirements;

  • technology requirements, project information or purchasing requirements;

  • target markets, budgets or partnership preferences where relevant; and

  • other information you choose to provide to us.

Business prospects

PAS may identify and contact relevant people within organisations where we reasonably believe our services, information, resources or technology-provider network may be relevant to their professional role or organisation.

For this purpose, we may collect:

  • name;

  • job title and professional role;

  • company name;

  • business email address;

  • business telephone number where available;

  • LinkedIn or other professional profile URL;

  • company website or domain;

  • business location;

  • company size, industry or sector; and

  • other relevant professional or company information.

This information may be obtained from third-party business data providers, professional networking platforms, company websites, business directories and other publicly available professional or business sources.

We do not rely solely on information voluntarily provided directly to PAS.

4. Where we obtain personal data
4. Where we obtain personal data
4. Where we obtain personal data

We may obtain personal data:

  • directly from you;

  • through our website or contact forms;

  • through email, telephone, meetings, LinkedIn, WhatsApp or other communications;

  • from clients, partners, suppliers or professional contacts;

  • from company websites and publicly available business sources;

  • from professional networking platforms and business directories;

  • from third-party business-to-business data providers, including Instantly; and

  • through our own business research and prospecting activities.

Where we obtain personal data from a source other than you, we process that information in accordance with applicable UK data protection law and provide access to this Privacy Policy where required.

We may obtain personal data:

  • directly from you;

  • through our website or contact forms;

  • through email, telephone, meetings, LinkedIn, WhatsApp or other communications;

  • from clients, partners, suppliers or professional contacts;

  • from company websites and publicly available business sources;

  • from professional networking platforms and business directories;

  • from third-party business-to-business data providers, including Instantly; and

  • through our own business research and prospecting activities.

Where we obtain personal data from a source other than you, we process that information in accordance with applicable UK data protection law and provide access to this Privacy Policy where required.

5. Our legal bases for processing
5. Our legal bases for processing
5. Our legal bases for processing

PAS processes personal data only where we have a lawful basis to do so.

Legitimate interests

We may rely on legitimate interests where processing is necessary for our legitimate commercial activities and those interests are not overridden by your rights and interests.

This may include:

  • identifying relevant businesses and professional contacts;

  • business-to-business prospecting;

  • communicating with relevant business contacts;

  • providing useful information or resources relevant to a person’s professional responsibilities;

  • identifying organisations with technology, software, telecoms or IT requirements;

  • developing relationships with prospective clients, partners and suppliers;

  • facilitating relevant business introductions;

  • maintaining business records;

  • improving our services; and

  • protecting and operating our business.

Where we rely on legitimate interests for direct marketing or prospecting, we consider the nature of the organisation, the recipient’s professional role, the relevance of our communication and the likely impact on the individual.

We may carry out and document a legitimate interests assessment where appropriate.

Contract

We may process personal data where necessary to:

  • take steps at your request before entering into a contract;

  • provide services you have requested; or

  • perform our obligations under a contract.

Consent

We may rely on consent where it is required by law or where you have specifically chosen to receive a particular type of communication.

Where processing is based on consent, you may withdraw your consent at any time.

Legal obligations

We may process personal data where necessary to comply with legal, regulatory, accounting or other obligations applying to PAS.

PAS processes personal data only where we have a lawful basis to do so.

Legitimate interests

We may rely on legitimate interests where processing is necessary for our legitimate commercial activities and those interests are not overridden by your rights and interests.

This may include:

  • identifying relevant businesses and professional contacts;

  • business-to-business prospecting;

  • communicating with relevant business contacts;

  • providing useful information or resources relevant to a person’s professional responsibilities;

  • identifying organisations with technology, software, telecoms or IT requirements;

  • developing relationships with prospective clients, partners and suppliers;

  • facilitating relevant business introductions;

  • maintaining business records;

  • improving our services; and

  • protecting and operating our business.

Where we rely on legitimate interests for direct marketing or prospecting, we consider the nature of the organisation, the recipient’s professional role, the relevance of our communication and the likely impact on the individual.

We may carry out and document a legitimate interests assessment where appropriate.

Contract

We may process personal data where necessary to:

  • take steps at your request before entering into a contract;

  • provide services you have requested; or

  • perform our obligations under a contract.

Consent

We may rely on consent where it is required by law or where you have specifically chosen to receive a particular type of communication.

Where processing is based on consent, you may withdraw your consent at any time.

Legal obligations

We may process personal data where necessary to comply with legal, regulatory, accounting or other obligations applying to PAS.

6. Business-to-business direct marketing
6. Business-to-business direct marketing
6. Business-to-business direct marketing

PAS may contact relevant people at businesses where we reasonably believe the subject of our communication is relevant to their organisation or professional responsibilities.

For business-to-business electronic marketing to corporate organisations, PAS may rely on legitimate interests where permitted under the UK GDPR and the Privacy and Electronic Communications Regulations 2003 (“PECR”).

Corporate organisations may include limited companies, limited liability partnerships, Scottish partnerships and other organisations with separate legal personality.

Different rules apply to sole traders and certain types of partnerships. Where consent or another specific requirement applies under PECR, PAS will comply with those requirements.

Our business-to-business communications will identify PAS and provide a straightforward way to tell us that you do not want further marketing communications.

You may object to direct marketing at any time.

If you ask us to stop, we will stop using your personal data for direct marketing.

PAS may contact relevant people at businesses where we reasonably believe the subject of our communication is relevant to their organisation or professional responsibilities.

For business-to-business electronic marketing to corporate organisations, PAS may rely on legitimate interests where permitted under the UK GDPR and the Privacy and Electronic Communications Regulations 2003 (“PECR”).

Corporate organisations may include limited companies, limited liability partnerships, Scottish partnerships and other organisations with separate legal personality.

Different rules apply to sole traders and certain types of partnerships. Where consent or another specific requirement applies under PECR, PAS will comply with those requirements.

Our business-to-business communications will identify PAS and provide a straightforward way to tell us that you do not want further marketing communications.

You may object to direct marketing at any time.

If you ask us to stop, we will stop using your personal data for direct marketing.

7. How we use personal data
7. How we use personal data
7. How we use personal data

We may use personal and business information to:

  • respond to enquiries;

  • provide requested information;

  • provide advisory or sourcing services;

  • identify relevant organisations and professional contacts;

  • conduct relevant business-to-business outreach;

  • provide information, guidance or resources relevant to a recipient’s professional role;

  • identify and discuss technology requirements;

  • qualify potential client requirements;

  • facilitate introductions between organisations and suitable technology providers;

  • identify and communicate with potential PAS partners;

  • manage client, partner, supplier and prospect relationships;

  • maintain CRM and business records;

  • administer our website;

  • analyse and improve website performance;

  • analyse and improve our services and communications;

  • prevent misuse, fraud or security incidents; and

  • comply with legal and regulatory obligations.

We do not sell or rent personal data.

We may use personal and business information to:

  • respond to enquiries;

  • provide requested information;

  • provide advisory or sourcing services;

  • identify relevant organisations and professional contacts;

  • conduct relevant business-to-business outreach;

  • provide information, guidance or resources relevant to a recipient’s professional role;

  • identify and discuss technology requirements;

  • qualify potential client requirements;

  • facilitate introductions between organisations and suitable technology providers;

  • identify and communicate with potential PAS partners;

  • manage client, partner, supplier and prospect relationships;

  • maintain CRM and business records;

  • administer our website;

  • analyse and improve website performance;

  • analyse and improve our services and communications;

  • prevent misuse, fraud or security incidents; and

  • comply with legal and regulatory obligations.

We do not sell or rent personal data.

8. Direct marketing objections and suppression
8. Direct marketing objections and suppression
8. Direct marketing objections and suppression

You have the right to object at any time to the use of your personal data for direct marketing.

You can do this by:

  • replying to one of our emails and asking us not to contact you again;

  • using an unsubscribe facility where one is provided; or

  • emailing info@projectadvisorysolutions.com.

If you object to direct marketing, we will stop using your personal data for that purpose.

Rather than deleting every record of the request, we may retain the minimum information necessary on a suppression or do-not-contact list.

This is necessary to ensure that we can recognise your details in future and avoid contacting you again for direct marketing purposes.

Information held on a suppression list will not be used to send you marketing.

You have the right to object at any time to the use of your personal data for direct marketing.

You can do this by:

  • replying to one of our emails and asking us not to contact you again;

  • using an unsubscribe facility where one is provided; or

  • emailing info@projectadvisorysolutions.com.

If you object to direct marketing, we will stop using your personal data for that purpose.

Rather than deleting every record of the request, we may retain the minimum information necessary on a suppression or do-not-contact list.

This is necessary to ensure that we can recognise your details in future and avoid contacting you again for direct marketing purposes.

Information held on a suppression list will not be used to send you marketing.

9. Data retention
9. Data retention
9. Data retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including legal, regulatory, accounting and legitimate business requirements.

Typical retention periods include:

Website analytics data: normally up to 3 years.

Client, supplier and partner information: normally for the duration of the relationship and for an appropriate period afterwards where required for business, contractual, tax or legal purposes.

Prospect and lead information: normally up to 3 years, subject to periodic review and unless there is a reason to retain it for longer or delete it sooner.

We may delete or update prospect data sooner where it is no longer relevant, accurate or necessary.

Where a person has objected to direct marketing, we may retain minimum identifying information on a suppression list for as long as necessary to ensure that their objection continues to be respected.

You may request deletion of your personal data, subject to any legal or legitimate reason we may have to retain particular information.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including legal, regulatory, accounting and legitimate business requirements.

Typical retention periods include:

Website analytics data: normally up to 3 years.

Client, supplier and partner information: normally for the duration of the relationship and for an appropriate period afterwards where required for business, contractual, tax or legal purposes.

Prospect and lead information: normally up to 3 years, subject to periodic review and unless there is a reason to retain it for longer or delete it sooner.

We may delete or update prospect data sooner where it is no longer relevant, accurate or necessary.

Where a person has objected to direct marketing, we may retain minimum identifying information on a suppression list for as long as necessary to ensure that their objection continues to be respected.

You may request deletion of your personal data, subject to any legal or legitimate reason we may have to retain particular information.

10. Data sharing and service providers
10. Data sharing and service providers
10. Data sharing and service providers

PAS uses third-party service providers to operate its business.

These may include providers of:

  • CRM systems;

  • business-to-business prospecting and outreach technology;

  • email services;

  • website hosting;

  • data storage;

  • website analytics;

  • communications tools;

  • security services; and

  • other business technology.

Providers used by PAS may include:

  • Odoo;

  • Instantly;

  • Google Analytics;

  • email and hosting providers; and

  • other suppliers required to operate our services.

Where a third party processes personal data on our behalf, we require appropriate contractual and data protection arrangements.

We may also share information where necessary with:

  • professional advisers;

  • technology providers where an introduction has been requested or is appropriate;

  • clients or partners where necessary to facilitate an agreed introduction;

  • regulators, law enforcement authorities or other public authorities where required by law; or

  • a purchaser, investor or successor organisation in connection with a legitimate corporate transaction.

We do not sell or rent personal data to third parties.

PAS uses third-party service providers to operate its business.

These may include providers of:

  • CRM systems;

  • business-to-business prospecting and outreach technology;

  • email services;

  • website hosting;

  • data storage;

  • website analytics;

  • communications tools;

  • security services; and

  • other business technology.

Providers used by PAS may include:

  • Odoo;

  • Instantly;

  • Google Analytics;

  • email and hosting providers; and

  • other suppliers required to operate our services.

Where a third party processes personal data on our behalf, we require appropriate contractual and data protection arrangements.

We may also share information where necessary with:

  • professional advisers;

  • technology providers where an introduction has been requested or is appropriate;

  • clients or partners where necessary to facilitate an agreed introduction;

  • regulators, law enforcement authorities or other public authorities where required by law; or

  • a purchaser, investor or successor organisation in connection with a legitimate corporate transaction.

We do not sell or rent personal data to third parties.

11. International transfers
11. International transfers
11. International transfers

Some of the technology providers and service providers used by PAS may process or store personal data outside the United Kingdom.

Where personal data is transferred internationally, PAS takes appropriate steps to ensure that the transfer complies with UK data protection law.

Depending on the country and provider involved, these safeguards may include:

  • UK adequacy regulations;

  • participation in an approved international data transfer framework;

  • the UK Extension to the EU-US Data Privacy Framework;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to approved Standard Contractual Clauses; or

  • another lawful transfer mechanism recognised under UK data protection law.

Where appropriate, further information about the safeguards used for an international transfer may be requested by contacting info@projectadvisorysolutions.com.

Some of the technology providers and service providers used by PAS may process or store personal data outside the United Kingdom.

Where personal data is transferred internationally, PAS takes appropriate steps to ensure that the transfer complies with UK data protection law.

Depending on the country and provider involved, these safeguards may include:

  • UK adequacy regulations;

  • participation in an approved international data transfer framework;

  • the UK Extension to the EU-US Data Privacy Framework;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to approved Standard Contractual Clauses; or

  • another lawful transfer mechanism recognised under UK data protection law.

Where appropriate, further information about the safeguards used for an international transfer may be requested by contacting info@projectadvisorysolutions.com.

12. Cookies and website analytics
12. Cookies and website analytics
12. Cookies and website analytics

We use essential cookies required for the operation of our website.

We may also use analytics or other non-essential cookies.

Where consent is required, non-essential cookies are used only after you have provided the appropriate consent through our cookie controls.

You can change or withdraw cookie consent through the website’s cookie settings or through your browser settings.

Further information about cookies may be provided through our website cookie controls.

We use essential cookies required for the operation of our website.

We may also use analytics or other non-essential cookies.

Where consent is required, non-essential cookies are used only after you have provided the appropriate consent through our cookie controls.

You can change or withdraw cookie consent through the website’s cookie settings or through your browser settings.

Further information about cookies may be provided through our website cookie controls.

13. Security
13. Security
13. Security

PAS takes appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure, access or destruction.

Measures may include:

  • SSL encryption;

  • secure systems and service providers;

  • access controls;

  • password protection;

  • limited access to authorised personnel; and

  • appropriate organisational procedures.

No system can guarantee absolute security, but we take reasonable steps proportionate to the nature of the information we process.

PAS takes appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure, access or destruction.

Measures may include:

  • SSL encryption;

  • secure systems and service providers;

  • access controls;

  • password protection;

  • limited access to authorised personnel; and

  • appropriate organisational procedures.

No system can guarantee absolute security, but we take reasonable steps proportionate to the nature of the information we process.

14. Your data protection rights
14. Your data protection rights
14. Your data protection rights

Depending on the circumstances, UK data protection law gives you rights including the right to:

  • request access to personal data we hold about you;

  • request correction of inaccurate or incomplete personal data;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • object to direct marketing;

  • withdraw consent where processing relies on consent;

  • request data portability where applicable; and

  • complain to the Information Commissioner’s Office.

Your right to object to direct marketing

You have an absolute right to object at any time to the use of your personal data for direct marketing.

If you object, PAS will stop processing your personal data for direct marketing purposes.

We may retain the minimum information necessary on a suppression list to make sure that your request continues to be respected.

To exercise any of your rights, contact:

info@projectadvisorysolutions.com

We will respond in accordance with the timescales required by applicable data protection law.

Depending on the circumstances, UK data protection law gives you rights including the right to:

  • request access to personal data we hold about you;

  • request correction of inaccurate or incomplete personal data;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • object to direct marketing;

  • withdraw consent where processing relies on consent;

  • request data portability where applicable; and

  • complain to the Information Commissioner’s Office.

Your right to object to direct marketing

You have an absolute right to object at any time to the use of your personal data for direct marketing.

If you object, PAS will stop processing your personal data for direct marketing purposes.

We may retain the minimum information necessary on a suppression list to make sure that your request continues to be respected.

To exercise any of your rights, contact:

info@projectadvisorysolutions.com

We will respond in accordance with the timescales required by applicable data protection law.

15. Automated decision-making and profiling
15. Automated decision-making and profiling
15. Automated decision-making and profiling

PAS may use technology to assist with business research, prospect identification, data organisation and the operation of outreach campaigns.

However, PAS does not make solely automated decisions using personal data that produce legal effects or similarly significant effects on individuals.

Human judgement remains part of our business development, sourcing and partner-selection processes.

PAS may use technology to assist with business research, prospect identification, data organisation and the operation of outreach campaigns.

However, PAS does not make solely automated decisions using personal data that produce legal effects or similarly significant effects on individuals.

Human judgement remains part of our business development, sourcing and partner-selection processes.

16. Children’s data
16. Children’s data
16. Children’s data

Our website and services are intended for businesses and professional users.

They are not directed at children.

We do not knowingly collect personal data from children for marketing or business development purposes.

Our website and services are intended for businesses and professional users.

They are not directed at children.

We do not knowingly collect personal data from children for marketing or business development purposes.

17. Personal data breaches
17. Personal data breaches
17. Personal data breaches

PAS maintains procedures for identifying, assessing and responding to personal data breaches.

Where a breach creates a risk to individuals’ rights and freedoms, PAS will notify the Information Commissioner’s Office where required by law and within the applicable statutory timeframe.

Where required, affected individuals will also be notified.

PAS maintains procedures for identifying, assessing and responding to personal data breaches.

Where a breach creates a risk to individuals’ rights and freedoms, PAS will notify the Information Commissioner’s Office where required by law and within the applicable statutory timeframe.

Where required, affected individuals will also be notified.

18. Your right to complain
18. Your right to complain
18. Your right to complain

If you believe PAS has not handled your personal data appropriately, please contact us first so that we can investigate.

Email: info@projectadvisorysolutions.com

You also have the right to lodge a complaint with the Information Commissioner’s Office.

Information Commissioner’s Office

Website: https://ico.org.uk/

Telephone: 0303 123 1113

Further information about making a complaint is available directly from the ICO.

If you believe PAS has not handled your personal data appropriately, please contact us first so that we can investigate.

Email: info@projectadvisorysolutions.com

You also have the right to lodge a complaint with the Information Commissioner’s Office.

Information Commissioner’s Office

Website: https://ico.org.uk/

Telephone: 0303 123 1113

Further information about making a complaint is available directly from the ICO.

19. Changes to this Privacy Policy
19. Changes to this Privacy Policy
19. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our activities, technology, service providers or legal obligations.

The latest version will always be published on this page and will show the date on which it was last updated.

We may update this Privacy Policy periodically to reflect changes to our activities, technology, service providers or legal obligations.

The latest version will always be published on this page and will show the date on which it was last updated.

20. Contact us
20. Contact us
20. Contact us

For questions about this Privacy Policy, our use of personal data or your data protection rights, contact:

Project Advisory Solutions

36 Melvinhall Road
Lanark
Scotland
ML11 7AU

Email: info@projectadvisorysolutions.com

Company registration no. SC805671

For questions about this Privacy Policy, our use of personal data or your data protection rights, contact:

Project Advisory Solutions

36 Melvinhall Road
Lanark
Scotland
ML11 7AU

Email: info@projectadvisorysolutions.com

Company registration no. SC805671