Last updated: 25 September 2026
This policy explains how Paul Ford, operating Project Management Heroes (PM Heroes), handles personal information through pmheroes.co.uk and related enquiries. The site is a single page. It has no forms, accounts or comments.
Who is responsible and how to contact us
Paul Ford is the data controller. Email paul@paulford.com if you have a privacy question or want to exercise your rights.
Information we collect and why
Enquiries and business conversations. If you email or telephone us, we may hold your name, contact details, organisation, message, correspondence and any information you choose to provide. We use it to answer you, arrange a conversation and discuss or deliver relevant services. Our lawful basis is our legitimate interest in handling enquiries and running the business; where you ask us to take steps towards a contract, it is also necessary for those steps. We do not use an enquiry as consent to send marketing.
Bookings. The site has a link to Calendly, a separate website, for booking a call. When you use it, Calendly may process your name, email address, chosen time, time zone, answers you provide and technical information needed to run the booking. We receive the booking details to arrange and conduct the call. Our lawful basis is the same as for enquiries. Calendly processes booking information on our behalf and also handles some website and cookie data under its own privacy notice. See Calendly’s Privacy Notice at https://calendly.com/privacy.
Site operation and security. Our website and hosting systems may process IP addresses, device and browser details, pages requested, timestamps and error or security logs to deliver the site, diagnose problems and protect it. Our lawful basis is our legitimate interest in keeping the site working and secure.
Most information comes directly from you. Technical information arises when your browser connects to the site. You can browse without giving us your name or email. We do not make decisions about you solely by automated means that have legal or similarly significant effects.
Cookies
No cookies are used on this site
Who receives information
Access is limited to people and providers who need information to run the site or handle your request. These include our website host, email and secure storage providers, and Calendly for bookings. Providers may act for us under contractual controls or, for their own activities, under their own privacy notices. We may disclose information if required by law or to establish, exercise or defend legal claims. We do not sell personal information.
International processing
Some providers process information outside the UK. Calendly, for example, processes data in the United States and describes its transfer safeguards in its Privacy Notice. Where UK data protection law requires a transfer mechanism for a provider acting on our behalf, we rely on an applicable adequacy arrangement or contractual safeguards, such as the UK addendum to standard contractual clauses. Contact us for details relevant to your information.
How long we keep information
We keep information only while it is needed for the purpose collected, then delete or anonymise it unless a legal obligation or a potential claim requires longer. We assess enquiry and booking records by whether a conversation, client relationship or relevant legal matter remains open. Website logs follow the host’s operational and security retention periods. Client and financial records are kept for the applicable accounting, tax and limitation periods.
Your rights
Depending on the circumstances, you can ask for access to your information, correction, deletion, restriction of processing, or a portable copy. You can object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time without affecting earlier lawful processing. Email paul@paulford.com to make a request. We may need to verify your identity, and some rights have legal exceptions.
You can also complain to the UK Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/. We would welcome the chance to address a concern first.
Security and changes
We use access controls and reasonable technical and organisational measures to protect information. No internet service is completely secure. We may update this policy as the site and services change; the date at the top shows when it was last revised.