This page explains what personal data VENALBE Ltd (“VENALBE”, “we”) collects through this website, why we collect it, and the rights you have under the UK GDPR and the Data Protection Act 2018.
Who we are
VENALBE Ltd, a company registered in England & Wales. For any privacy question or request, contact alberto@venalbe.co.uk.
What we collect
- Enquiry data you submit through the form on the home page: what you’re enquiring about (Diagnose sprint, Direct retainer, or not sure yet), name, email, studio or agency name, role, studio website, your free-text answer to our question about the most important call your team is wrestling with, monthly advisory budget (where applicable), and timeline.
- Agreement signing data collected when you sign a mutual NDA or consulting agreement at
/ndaor/contract: name, email, company, role, electronic signature image, signing date, and browser user agent. This is processed to generate and store the signed agreement document. - Technical data automatically collected when you visit the site: anonymised request data via Cloudflare Web Analytics (cookieless — no individual tracking).
- Marketing data via third-party advertising pixels (LinkedIn Insight Tag, Meta Pixel, and similar), only if you consent via the cookie banner. See cookies for the current list.
Why we use it
- To evaluate whether you are a fit for advisory work and to reply to your application.
- To understand how the site is performing in aggregate.
- To measure marketing campaigns and reach similar audiences, where you have given consent.
Lawful basis
- Application data — legitimate interest (responding to a request you initiated) and the consent you give when you tick the box on the form.
- Agreement signing data — contract (Art. 6(1)(b) UK GDPR) — processing is necessary to form and execute the agreement between the parties.
- Marketing pixels — consent (you can withdraw it at any time via the cookie preferences link).
Where it is stored
Application data is appended to a private Google Sheet and processed by a Google Apps Script under the VENALBE Google account. Signed agreement PDFs are stored in a private Google Drive folder under the same account; an audit log is maintained in a separate Google Sheet. Marketing data, when consented, is shared with the relevant advertising platforms. We do not sell your data.
How long we keep it
Application data is retained for up to 24 months from submission, then deleted. Signed agreement documents and their audit logs are retained for 7 years to comply with UK contract law requirements. You can ask us to delete data that is not subject to a legal retention obligation at any time.
Your rights
Under UK GDPR you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. Email alberto@venalbe.co.uk to exercise any of these rights. If you are unhappy with our response, you can complain to the Information Commissioner’s Office (ico.org.uk).
Changes to this notice
We update this page when our processing changes — for example, when we add a new advertising pixel. The “last updated” date at the top reflects the most recent change.