Legal

Privacy notice

This notice explains how Procernus Ltd collects, uses and protects personal information.

Last updated: 16 September 2026

Who we are

Procernus Ltd is the controller responsible for the personal information described in this notice.

Procernus Ltd
Company number 17463237
5 St. John's Lane
London, England
EC1M 4BH

Privacy enquiries: privacy@procernus.com

What information we collect

Information you give us

We may collect information when you:

  • contact us by email, through the website or through another communication channel;
  • ask about, purchase or receive our services;
  • work with us as a client, supplier, partner or professional contact; or
  • apply for a role or otherwise take part in our recruitment process.

This may include your name, work details, contact information, correspondence and information about the organisation you represent. Recruitment information may also include your CV, employment history, portfolio or profile links, cover note, salary expectations, interview notes, references and information needed to assess your suitability for a role.

Please do not provide special category information, such as health, ethnicity, religion or sexual orientation, unless we specifically request it and explain why it is needed.

Information collected when you use our website

Our hosting and security providers may automatically process technical information such as your IP address, browser and device type, requested pages, timestamps, diagnostic information and security events. We use this information to deliver, protect and troubleshoot the website. We do not currently use advertising trackers or non-essential behavioural analytics on this website.

How and why we use information

Enquiries and prospective work
To respond, discuss your requirements and take steps before entering a contract. We rely on steps requested before a contract and our legitimate interests in developing our business.
Client, supplier and partner relationships
To deliver services, administer agreements, communicate and keep appropriate business records. We rely on contract, legitimate interests and legal obligations as applicable.
Recruitment
To assess candidates, communicate about roles, arrange interviews, check information and make hiring decisions. We rely on steps requested before a contract, legitimate interests in recruiting suitable people and legal obligations.
Website operation and security
To deliver the website, maintain availability, prevent misuse, diagnose faults and protect our systems. We rely on our legitimate interests in operating a secure and effective website.
Legal and regulatory matters
To comply with law, respond to lawful requests and establish, exercise or defend legal claims. We rely on legal obligations and legitimate interests.

We do not use solely automated decision-making to make decisions that have legal or similarly significant effects on you.

Who we share information with

We may share personal information where necessary with:

  • website hosting and infrastructure providers, currently including Vercel;
  • content management providers, currently including Sanity;
  • email delivery, communications, recruitment and file-security providers;
  • professional advisers such as accountants, insurers and legal advisers;
  • public authorities, regulators or law enforcement where required by law; and
  • a buyer, investor or successor if our business or assets are reorganised or transferred.

These organisations may act as processors under our instructions or as independent controllers for their own legal responsibilities. We do not sell personal information.

International transfers

Some service providers process information outside the United Kingdom, including in the United States. Where personal information is transferred internationally, we use an applicable UK adequacy regulation or contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses, together with supplementary safeguards where appropriate.

You can contact us for more information about the safeguards relevant to your information.

How long we keep information

We keep personal information only for as long as it is reasonably needed for the relevant purpose.

  • Candidate information is normally retained for 12 months after the recruitment process ends. During that period, we may consider a candidate for other suitable roles. Candidates can ask us not to do so.
  • Enquiry and business correspondence is retained for as long as needed to manage the relationship and normally no longer than 24 months after the last substantive contact, unless it becomes part of a client, supplier or legal record.
  • Contract, transaction and accounting records may be retained for up to six years after the relevant relationship or accounting period, or longer where law requires.
  • Technical logs are retained for limited operational and security periods determined by our providers and our security needs.

We may retain information for longer where necessary to establish, exercise or defend legal claims.

Cookies and similar storage

We do not currently use non-essential analytics or advertising cookies. The site and its hosting platform may use essential technical storage needed for security, service delivery and user preferences. These technologies are not used to build advertising profiles.

If we introduce non-essential analytics, advertising or similar technologies, we will update this notice and request consent where required before using them.

Read our cookie notice for more information.

Your data protection rights

Depending on the circumstances, you may have the right to:

  • ask for a copy of your personal information;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete information;
  • ask us to restrict how information is used;
  • object to processing based on legitimate interests;
  • receive certain information in a portable format; and
  • withdraw consent where processing is based on consent.

These rights are not absolute. We may need to verify your identity and may retain some information where required or permitted by law. We normally respond within one month.

Contact and complaints

To exercise your rights or raise a privacy concern, email privacy@procernus.com.

You may also complain to the UK Information Commissioner's Office. We would appreciate the chance to address your concern first, but you are not required to contact us before approaching the ICO. Visit ico.org.uk/make-a-complaint.

Changes to this notice

We may update this notice when our services, suppliers or legal obligations change. The latest version will always be published on this page with its revision date.