top of page

Privacy Notice

Blossom Business Growth Limited respects your privacy and is committed to protecting your personal information. This Privacy Notice explains how we collect, use, store and protect personal information when you contact us, use our website or engage us to provide professional services.

1. Who we are

Blossom Business Growth Limited is a business development consultancy providing services including business development, grant funding and bid writing, funding strategy, tender support, evaluation and impact reporting, partnership development, fundraising and related consultancy services.

Blossom Business Growth Limited is registered in England and Wales under company number 13271342.

For personal information that we determine how and why to use, Blossom Business Growth Limited acts as the data controller.  For some client assignments, we may process personal information on behalf of a client and under their instructions. In these circumstances, the client will normally be the data controller and Blossom Business Growth Limited will act as a data processor.

2. Personal information we collect

Depending on your relationship with us and the services we provide, we may process:

  • your name, job title and organisation;

  • business and personal contact details, including email addresses and telephone numbers;

  • correspondence and information provided through our website contact form;

  • information relating to clients, suppliers and professional contacts;

  • information contained within funding applications, tenders, evaluations, reports and other client documents;

  • CVs and employment-related information;

  • financial information where relevant to an assignment;

  • photographs, testimonials and case studies; and

  • other personal information supplied to us where necessary to provide our services.

 

During some client assignments we may also receive information concerning beneficiaries, service users, children or vulnerable adults. This can include special category information, such as information about health, disability or ethnicity.

We ask clients wherever practicable to provide anonymised or pseudonymised information where identifying an individual is not necessary for the work being undertaken.

3. How we obtain personal information

We may obtain personal information:

  • directly from you;

  • through enquiries submitted via our website;

  • through email, telephone or other correspondence;

  • from organisations that engage us to provide consultancy services;

  • from their employees, trustees, directors, partners or representatives;

  • from project partners and other organisations involved in an assignment; and

  • from publicly available sources where appropriate.

 

When a client provides us with personal information about another person, the client remains responsible for ensuring that it is entitled to provide that information to us.

 

4. How we use personal information

We may use personal information to:

  • respond to enquiries;

  • communicate with existing and prospective clients;

  • provide and manage our consultancy services;

  • prepare funding applications, bids, tenders, evaluations and reports;

  • manage client relationships and assignments;

  • communicate with funders, project partners and other organisations where this forms part of an agreed assignment;

  • issue invoices and maintain appropriate financial and business records;

  • comply with legal and regulatory obligations;

  • establish, exercise or defend legal rights; and

  • operate, maintain and protect our business and website.

 

We do not sell personal information and we do not use personal information for automated decision-making or profiling.

5. Our lawful bases

Under UK data protection law, we must have a lawful basis for using personal information.  Depending on the circumstances, we may rely on:

Contract – where processing is necessary to enter into or perform a contract with you.

Legitimate interests – where processing is reasonably necessary for the operation of our business, provision of our professional services, management of client relationships, responding to enquiries or protecting our business interests, provided those interests are not overridden by your rights and interests.

Legal obligation – where we need to process information to comply with a legal or regulatory requirement.

Consent – where consent is appropriate and has been specifically requested. Where we rely on consent, you may withdraw it at any time.

Where we process special category personal information, we will only do so where an appropriate additional condition under data protection law applies.

6. Client and beneficiary information

Our work sometimes requires clients to provide information about employees, trustees, directors, beneficiaries, service users or other individuals.  We only use this information for the purpose for which it has been supplied and in accordance with the agreed client assignment and applicable data protection requirements.  We encourage clients not to provide identifiable or sensitive personal information where anonymised information will meet the requirements of the assignment.

​​

7. Sharing personal information

We do not sell or trade personal information.

We may share information where necessary with:

  • the client that commissioned our work;

  • funders, commissioners or other organisations where submission of information forms part of the agreed assignment;

  • project partners where necessary for the work being undertaken;

  • professional advisers and service providers supporting the operation of our business;

  • website and technology providers, including Wix and Microsoft; and

  • regulatory, governmental or law-enforcement bodies where required by law.

 

We only share personal information where there is an appropriate reason to do so and seek to limit information to what is necessary for the purpose.

8. How we store and protect information

Electronic information is stored using password-protected devices and reputable technology and cloud-service providers.  Our principal business systems include Microsoft 365 for business communications and document management and Wix for our website and website enquiries.  Access to information is restricted to those who require it for legitimate business purposes.  We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration or disclosure.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet any legal, contractual or regulatory requirements.

Routine business correspondence is normally reviewed and deleted or archived after approximately 12 months where it is no longer required.

Personal information supplied specifically for a funding application, evaluation, tender or other client assignment is normally deleted when it is no longer required for that assignment.

We may retain completed applications, reports and other professional work for legitimate business and record-keeping purposes. Wherever reasonably practicable, information identifying beneficiaries or service users will be removed or anonymised before documents are retained for longer-term reference.

Financial and statutory records may be retained for longer where required by law. 

 

10. Website and cookies

Our website is provided using Wix and uses cookies and similar technologies to operate securely and provide website functionality.  Some cookies and technologies are essential for the operation of the website and do not require consent. We may also use non-essential technologies, including services associated with Google Maps.

Where consent is required, non-essential cookies and technologies will only be activated after you have made your choice through our cookie consent banner.  You can accept or reject non-essential cookies and manage your preferences through the cookie settings available on our website. You can change your preferences at any time.  We periodically review the cookies and technologies used by our website and update our settings and privacy information where necessary.

11. Your data protection rights

Depending on the circumstances, UK data protection law gives you rights in relation to your personal information. These may include the right to:

  • ask for access to your personal information;

  • ask us to correct inaccurate information;

  • ask us to delete personal information;

  • ask us to restrict how information is used;

  • object to certain uses of your information;

  • receive certain information in a portable format; and

  • withdraw consent where we rely upon consent.

 

Not all rights apply in every circumstance.  If you wish to exercise a data protection right, please contact us using the details below.

12. Contact us

If you have a question about this Privacy Notice or how Blossom Business Growth Limited handles personal information, please contact: Blossom Business Growth Limited


Email: peter@blossombusinessgrowth.com
Website: www.blossombusinessgrowth.com

13. Complaints

If you have concerns about how we use your personal information, please contact us in the first instance so that we have an opportunity to address them.  You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.  Information about making a complaint is available from the ICO at www.ico.org.uk.

14. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to our services, business practices or legal requirements. 

Last updated: August 2026

Website by

White Vinyl Media

White Vinyl Media.png
bottom of page