Privacy Statement

Last updated: 20/10/2026

TealePen & Pixel Ltd helps UK financial advice firms plan and implement their transition to AI. This policy explains what personal data we collect, why we collect it, how we look after it and what your rights are.

1. Who we are

TealePen and Pixel Ltd is a company registered in England and Wales (company number 17509081), with its registered office at The Old Forge, Elm Farm, Paddlesworth, Kent, United Kingdom, CT18 8AD.

For personal data we collect about our own contacts, clients and website visitors, we are the data controller. We are registered with the Information Commissioner’s Office (ICO) under registration number ZC279472.

If you have any questions about this policy or your data, email [email protected].

2. What data we collect

When you contact us, book a call or become a client

• Your name, job title, firm name, email address and phone number
• Details of our conversations, including notes and, with your agreement, call recordings
• Billing details, such as invoice address and payment records

When you visit our website

• Usage data collected through analytics tools, such as pages viewed, device type and approximate location. See section 9 for details.

When you download our resources or subscribe to updates

• Your name and email address, and whether you open our emails

We don’t collect special category data (such as health information) about you as a business contact.

3. How we use your data and our lawful basis

4. Client data within engagements

Some engagements, such as building integrations between your CRM, cash flow and platform systems, need access to data your firm holds about its own clients. When that happens:

• Any workflows we build keep a human approval step for actions that change client records, unless you’ve agreed otherwise in writing.
• Your firm remains the data controller, and we act as your data processor.
• We process that data only on your written instructions, under a signed Data Processing Agreement.
• We access only what the agreed work needs, and use it for no other purpose.
• We never sell it or use it to train AI models.
• We delete or return it at the end of the engagement, unless we’ve agreed otherwise in writing.

5. Your Rights

We use AI tools in our own work and in the systems we build for clients. Where client data is involved, we use business-grade services whose terms don’t allow your data to be used for model training. We list the tools involved in each engagement’s Data Processing Agreement.

6. Who we share data with

We share personal data only with service providers who help us run the business, such as:

• Scheduling: Calendly
• CRM and invoicing: Airtable and QuickBooks
• Automation: n8n
• Email and file storage: Mailerlite and Google
• Website hosting: Hostinger
• Website analytics: Google Analytics

Each acts under contract and only on our instructions. We may also share data with professional advisers, such as our accountant, or where the law requires it.

7. International transfers

Some of our service providers are based outside the UK, mainly in the United States. Our team may also access data from outside the UK. Where personal data leaves the UK, we make sure it’s protected by:

• UK adequacy regulations, including the UK–US data bridge where the provider is certified, or
• the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

8. How long we keep data

• Enquiries that don’t lead to work: up to 2 years after our last contact
• Client contracts and financial records: 6 years after the end of the financial year they relate to, to meet tax and accounting obligations
• Client data processed during an engagement: deleted or returned at the end of the engagement, as set out in the Data Processing Agreement
• Mailing list: until you unsubscribe

9. Cookies and analytics

Our website uses Google Analytics to understand how visitors use the site. Non-essential cookies are set only with your consent, which you can change at any time through the cookie banner. Booking links and embedded forms, such as Cal.com and Mailerlite, are covered by their providers’ own privacy policies.

10. How we protect your data

We use access controls, multi-factor authentication and encrypted connections, and limit access to people who need it. If a data breach is likely to put your rights at risk, we’ll notify the ICO within 72 hours and tell you without undue delay where required.

11. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data deleted
• restrict or object to how we use it, including for marketing
• data portability
• withdraw consent at any time, where we rely on consent

To use any of these rights, email [email protected]. We’ll respond within one month.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put things right first.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

📬 Contact

If you have questions about this policy or how your data is handled, please contact:

Philip Teale
Email: [email protected]

Company: TealePen & Pixel Ltd, United Kingdom