Last updated: 12/2/26
This Privacy Policy explains how Performance Learning Group Ltd (PLG) (“we”, “us”, “our”) collects, uses, stores, and protects personal data when you interact with our website, contact us, or engage with our services.
We are committed to handling personal data responsibly, transparently, and in accordance with:
- The UK General Data Protection Regulation (UK GDPR)
- The Data Protection Act 2018
- The Privacy and Electronic Communications Regulations (PECR)
1. Who We Are
Performance Learning Group Ltd is the data controller for personal data processed in connection with our website and services.
Company Name: Performance Learning Group Ltd
Company Number: 09618299
Registered Address: 5 Ducketts Wharf, South Street, Bishop’s Stortford, Hertfordshire, CM23 3AR
Email: info@plgrp.co.uk
Telephone: 01279 898763
PLG has not appointed a formal Data Protection Officer, as one is not legally required. Data protection responsibilities are overseen at senior management level.
2. Our Commitment to Data Protection
We process personal data in line with the UK GDPR principles, ensuring data is:
- Processed lawfully, fairly, and transparently
- Collected for specified and legitimate purposes
- Adequate, relevant, and limited to what is necessary
- Accurate and kept up to date
- Retained only for as long as necessary
- Protected using appropriate technical and organisational measures
- Processed in line with individuals’ rights
3. Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity data: name, job title, organisation
- Contact data: email address, telephone number, postal address
- Usage and technical data: IP address, browser type, device information, website interaction and analytics
- Communication data: enquiries, forms, emails, telephone records, and feedback
We do not intentionally collect special category data through our website. Where such data is required for service delivery, it is handled under strict safeguards and legal obligations.
4. How We Collect Personal Data
We collect personal data when you:
- Submit an enquiry or form via our website
- Contact us by email, telephone, or social media
- Engage with our services or request information
- Interact with our website, where cookies and analytics tools record usage
We may also receive limited data from third-party platforms where legally permitted.
5. How We Use Personal Data
We use personal data to:
- Respond to enquiries and provide requested information
- Deliver and administer services
- Communicate operational, contractual, or service-related information
- Improve our website, systems, and user experience
- Send marketing or outreach communications where legally permitted
- Meet legal, regulatory, safeguarding, and compliance obligations
We do not sell or rent personal data.
6. Lawful Bases for Processing
We process personal data under one or more of the following lawful bases:
- Consent – where you have actively opted in (e.g. marketing communications)
- Contractual necessity – where processing is required to provide services
- Legitimate interests – for business communications, service improvement, analytics, and relationship management
- Legal or regulatory obligation
You may withdraw consent at any time.
7. Sharing Personal Data & Third-Party Processors
We engage carefully selected third-party partners and service providers who process personal data on our behalf in compliance with UK GDPR.
These may include:
- Hosting and IT service providers
- CRM, analytics, and marketing platforms
- Professional advisers (legal, compliance, finance)
Digital marketing and outreach
From time to time, we appoint digital marketing agencies to support outreach and marketing activities. As part of these services, personal data may be processed in accordance with applicable data protection laws.
Our appointed processors include:
Prospect Global Ltd (trading as Sopro)
UK Company Number: 09648733
Website: https://sopro.io
ICO Registration Number: ZA346877
Data Protection Officer: dpo@sopro.io
Where personal data is transferred outside the UK, appropriate safeguards are in place, such as Standard Contractual Clauses.
8. Data Security
We implement appropriate technical and organisational measures to protect personal data, including:
- Secure hosting and encryption
- Role-based access controls
- Staff training and awareness
- Incident response and breach management procedures
If you believe your data has been misused, please contact us immediately.
9. Data Retention
We retain personal data only for as long as necessary to fulfil its purpose, including legal, contractual, and regulatory requirements. Data is securely deleted or anonymised when no longer required.
10. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Request correction or erasure
- Object to or restrict processing
- Withdraw consent
- Request data portability (where applicable)
Requests can be made by emailing info@plgrp.co.uk.
If you are dissatisfied with our response, you may contact the Information Commissioner’s Office (ICO):
https://ico.org.uk
11. Cookies
Our website uses cookies to support functionality, performance, analytics, and marketing. For full details, including how to manage your preferences, please see our Cookie Policy.
12. External Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of external sites and encourage you to review their privacy policies separately.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. The most recent version will always be published on this page.
Contact Us
If you have questions about this Privacy Policy or how we handle personal data, please contact:
Performance Learning Group Ltd
Email: info@plgrp.co.uk
Telephone: 01279 898763