PRIVACY
Privacy Policy
Last updated: 1 September 2026
1. Who we are
This website is operated by Lean Sales Excellence Limited, a company registered in England and Wales under company number 17426354, with its registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom ("we", "us").
For the purposes of UK data protection law, Lean Sales Excellence Limited is the data controller of the personal information described in this policy.
If you have any questions about this policy or how your information is used, you can contact us at chris.parsonage@leansalesexcellence.co.uk, by phone on +44 7414 746602, or by post at the registered office address above.
2. What information we collect
We collect personal information in the following ways:
When you complete the Commercial Health Check:
- Your name, business name, email address and phone number (if provided)
- Information about your business (size, sector, business model, country)
- Your answers to the assessment questions
- Whether you've given consent to receive marketing communications from us
When you contact us directly (for example, via the contact page or email), your name, email address and the content of your message.
We do not use cookies, analytics or tracking technologies on this website — see our Cookie Policy. We do not collect any information about you simply from browsing the site.
3. How the Commercial Health Check handles your information
While you are working through the assessment, your answers are held only in your own browser (local storage) so that your progress is saved if you leave and come back. Nothing is sent to us at this stage.
When you submit the assessment with your email address, your business profile, scores and answers are sent securely to a server-side function and stored so that your results can be retrieved and a review can be followed up. Your contact details and headline results are also added as a contact record in our customer relationship management system, HubSpot, which we use to manage enquiries and, where you have agreed, send you your results and follow-up communication.
Detailed, question-by-question answers are used only to prepare your results and are accessible solely to us for that purpose — they are never shown on the shared results page or passed to HubSpot beyond the summary scores described above.
4. What the free Health Check does not disclose
The free Commercial Health Check reports a score, a maturity band, a radar and a general priority theme. It does not disclose the names of the ten proprietary tools, the detailed question-to-tool mapping, scoring matrices beyond the simple 1–5 answer scale, root-cause interpretation or implementation templates — these are reserved for the Diagnostic, Workshop and Improvement Programme engagements.
5. How we use your information
We use your information to:
- Generate and send you your Commercial Health Check results
- Store your results so you, or we on your request, can refer back to them
- Contact you about your results, if you've asked us to or agreed to marketing communications
- Respond to enquiries you send us
- Improve the Commercial Health Check tool and our services generally, using anonymised or aggregated insights
We will only send you marketing communications (such as follow-up emails about your results or our services) if you have explicitly agreed to this by ticking the relevant consent box. You can withdraw this consent at any time — see Section 8.
6. Our lawful basis for processing
Under UK GDPR, we rely on the following lawful bases:
- Consent — for sending marketing emails following your Commercial Health Check submission
- Legitimate interests — for storing and processing your assessment results in order to provide them to you, and to respond to your enquiries. We consider this a reasonable and expected use of the information you've actively provided us
- Contract / pre-contract steps — where you engage us for consulting or workshop services, we process your information to prepare proposals and deliver that engagement
7. Who we share your information with
We use a small number of trusted third-party services to operate this website and deliver the Commercial Health Check. These providers act as data processors on our behalf, meaning they only process your data according to our instructions and cannot use it for their own purposes:
| Provider | Purpose |
|---|---|
| Netlify | Hosts the website and securely stores your assessment results |
| HubSpot | Our customer relationship management (CRM) system — stores your contact details and assessment scores so we can manage and respond to enquiries |
| Resend | Sends the automated results email to you after you complete the assessment |
We do not sell, rent or trade your personal information to any third party for their own marketing purposes. We may disclose your information if required to do so by law, or to protect our legal rights.
8. How long we keep your information
We retain Commercial Health Check submissions and related contact records for 6 months from the date of your last interaction with us, after which they are deleted, unless a longer period is required by law or you have an ongoing engagement with us.
9. Your rights
Under UK GDPR, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Erasure — ask us to delete your information ("right to be forgotten")
- Restrict how we use your information
- Object to certain uses of your information, including marketing
- Data portability — receive your information in a portable format
- Withdraw consent at any time, where we rely on consent (for example, marketing emails)
To exercise any of these rights, contact us using the details in Section 1. We will respond within one month, as required by law.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk, if you believe we have not handled your information properly.
10. Security
We take reasonable technical and organisational measures to protect your information, including secure hosting, restricted access to internal systems, and password protection on our administrative tools. See our Security & Data statement for more detail. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised.