Privacy policy
Who we are
This website is run by Aligned Growth Limited, which is the data controller for the personal information collected through it. This means we decide how and why your information is used. You can contact us about this policy or your information through the contact page. Aligned Growth Limited is a company registered in England and Wales (company number 10204543), with its registered address at 167–169 Great Portland Street, 5th Floor, London W1W 5PF. You can also email paul@paulpiccirillo.co.uk.
The information we collect
Information you give us. When you send an enquiry through the contact form on this website, we receive your name, email address, company, turnover band and message, which are stored securely so we can reply. When you email us, message us on LinkedIn or book a call, we receive the details you choose to share, such as your name, email address, company and the content of your message.
Information collected automatically. When you visit, our hosting provider handles technical information needed to deliver the website, and records basic visitor statistics. If you choose Accept all in the cookie banner, Google Analytics also collects information about how you use the site. Our cookie policy lists every cookie in detail.
We do not knowingly collect special category information, such as health details, and we ask you not to send it to us.
How we use it and our legal basis
UK data protection law requires us to have a legal basis for each way we use your information. These are set out below.
| Purpose | Information | Legal basis |
|---|---|---|
| Replying when you contact us through the website contact form, email, LinkedIn or a booked call | Name, email address, company, turnover band, anything you include in your message | Legitimate interests (responding to your enquiry), or steps before entering a contract with you |
| Providing advisory, board or mastermind services you sign up for | Contact details, business information you share, notes from sessions, billing details | Performance of a contract |
| Running the website securely and serving the current version | Technical data such as IP address and browser type, handled by our hosting provider | Legitimate interests (keeping the website working and secure) |
| Hosting provider visitor statistics | Pages viewed, referring page, browser, language, approximate country, random session identifier | Legitimate interests (understanding which pages are useful) |
| Google Analytics | Pages viewed, time on site, device and browser, approximate location, online identifiers | Consent, given through the cookie banner |
| Keeping business and tax records | Invoices and contract records | Legal obligation |
We do not sell your information, use it for advertising or make decisions about you using automated processing.
Who we share it with
We only share your information with service providers who help us run the website and our business, and only as much as they need:
- Lovable, our website hosting provider, which serves the site and records basic visitor statistics.
- Google, which provides Google Analytics, only if you give consent.
- Our email, calendar and accounting providers, when you contact us or work with us.
- LinkedIn, if you choose to contact us there. LinkedIn’s own privacy policy applies to its platform.
We may also share information if the law requires it, or with professional advisers such as accountants or lawyers.
International transfers
Some of our service providers, including Google and our hosting provider, may process information outside the UK, including in the United States. Where this happens, we rely on safeguards recognised under UK law, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework or the International Data Transfer Addendum.
How long we keep it
- Enquiries that do not lead to working together: up to 2 years from our last contact.
- Client records, contracts and invoices: 6 years after the end of the engagement, to meet tax and legal requirements.
- Google Analytics data: 14 months, after which Google deletes it automatically.
- Hosting provider statistics: as set by our hosting provider, linked to a cookie that expires after 30 minutes.
Keeping it safe
We use reputable providers with appropriate security measures, keep access to your information limited to those who need it, and take sensible steps to protect it from loss, misuse or unauthorised access.
Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use your information;
- object to us using your information on the basis of legitimate interests;
- ask us to transfer your information to another organisation;
- withdraw your consent at any time, where we rely on consent.
To use any of these rights, get in touch through the contact page. We will reply within one month. There is usually no charge.
Cookies and your choices
You can change your analytics choice at any time using the Cookie settings link at the bottom of every page, or . Full details are in our cookie policy.
Links to other websites
This website links to other sites, such as LinkedIn. We are not responsible for how those sites handle your information, so please read their privacy policies.
Making a complaint
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The date at the bottom shows when it was last changed.
Last updated: 4th November 2026.
