Last updated: February 2026 Five in a Boat Ltd ("we", "us", or "our") is a growth consultancy registered in England and Wales (company no. 09998658). We are committed to protecting your privacy and handling your personal data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with us, visit our website (www.fiveinaboat.com), or engage with our services.
1. Data Controller
Five in a Boat Ltd is the data controller responsible for your personal data. If you have any questions about this policy or our data practices, please contact us: Emma Pearce, Data Protection Officer Five in a Boat Ltd Email: emma@fiveinaboat.com
2. What Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data: Information you provide directly: • Name and job title • Email address and telephone number • Company name and business address • Any information included in correspondence or enquiry forms Information collected automatically via our website: • IP address, browser type, and device information • Pages visited, time spent on site, and referral source • Cookie data and similar tracking technologies (see Section 8) Information from third parties: • Publicly available business contact information (e.g. LinkedIn, company websites) • Information provided by our clients in connection with projects
3. How We Use Your Data
We use your personal data for the following purposes: • To respond to enquiries and provide our consultancy services • To communicate with you about projects, proposals, and opportunities • To send relevant industry updates or marketing communications (with your consent) • To manage our client relationships and contractual obligations • To improve our website and understand how visitors use it • To comply with legal and regulatory obligations
4. Legal Basis for Processing
Under the UK GDPR, we rely on the following lawful bases to process your data: • Consent — where you have given clear consent for us to contact you for marketing purposes. You may withdraw consent at any time. • Contractual necessity — where processing is necessary to perform a contract with you or to take pre-contractual steps at your request. • Legitimate interests — where processing is necessary for our legitimate business interests (such as business development and improving our services), provided these are not overridden by your rights. • Legal obligation — where we are required to process data to comply with applicable law.
5. Who We Share Your Data With
We do not sell your personal data. We may share your data with: • Our clients, where relevant to services we are delivering on their behalf • Trusted service providers who help us operate our business (e.g. email platforms, analytics tools, hosting providers), under appropriate data processing agreements • Professional advisers such as accountants or legal counsel • Regulatory bodies, law enforcement, or other authorities where required by law
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Typically: • Client and project data: retained for the duration of our engagement plus 6 years • Marketing contacts: retained until you unsubscribe or withdraw consent • Website analytics data: retained in anonymised form
7. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Access to personal data is limited to authorised personnel who need it for legitimate business purposes.
8. Cookies
Our website uses cookies and similar technologies to enhance your browsing experience and analyse site usage. These include: • Essential cookies — required for the website to function properly • Analytics cookies — help us understand how visitors interact with our site (e.g. Google Analytics) • Third-party cookies — set by embedded content or social media features You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect your experience on our site.
9. Your Rights
Under the UK GDPR, you have the following rights regarding your personal data: • Right of access — request a copy of the personal data we hold about you • Right to rectification — request correction of inaccurate or incomplete data • Right to erasure — request deletion of your data in certain circumstances • Right to restrict processing — request that we limit how we use your data • Right to data portability — request your data in a structured, machine-readable format • Right to object — object to processing based on legitimate interests or direct marketing • Right to withdraw consent — where we rely on consent, you may withdraw it at any time To exercise any of these rights, please contact us at emma@fiveinaboat.com. We will respond within one month of receiving your request.
10. International Transfers
We primarily process data within the United Kingdom. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
13. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Website: ico.org.uk Telephone: 0303 123 1113
