Privacy Policy

Privacy Policy

Effective Date: 14 May 2025Last Updated: 14 May 2025 At DanDee Consulting, we are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible way. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or engage with our Workday consulting services. 1. Who We Are DanDee Consulting is a London-based Workday consulting firm supporting organisations across the UK and Europe with Workday configuration, integration, compliance, and post-launch support services. Contact Information: Email: info@pearllemongroup.com Phone (UK): +44 7454 539583 \| +44 207 183 3436 Phone (US): +1 650 278 4421 Address: Kemp House, 160 City Rd, London EC1V 2NX, UK 2. What Data We Collect We may collect and process the following types of personal data: A. Data You Provide to Us B. Data Collected Automatically This data is collected via cookies and similar tracking technologies. See our Cookie Policy for more information. 3. How We Use Your Data We process your personal data to: 4. Legal Bases for Processing We rely on the following legal bases for processing your data: 5. Data Sharing and Transfers We do not sell or rent your personal data to third parties. However, we may share your information with: Some of these partners may be based outside the UK or EU. In such cases, we ensure data transfers are compliant with the UK GDPR and EU GDPR via Standard Contractual Clauses (SCCs) or equivalent safeguards. 6. Data Retention We retain personal data only as long as necessary for the purposes outlined in this policy, including: If you request data deletion, we will securely erase your personal information unless legal obligations prevent us from doing so. 7. Your Rights Under GDPR As a data subject under the GDPR and UK data protection laws, you have the following rights: To exercise your rights, contact us at: info@pearllemongroup.com 8. Cookies and Tracking Technologies We use cookies and analytics tools (e.g., Google Analytics) to: You can manage your cookie preferences through your browser settings. See our separate Cookie Policy for more detail. 9. Data Security We apply appropriate technical and organisational measures to safeguard your data, including: Despite these measures, no system is completely immune to risks. Please notify us immediately if you suspect unauthorised access to your data. 10. Third-Party Links Our website may contain links to third-party websites (e.g., Workday, blog articles, partner services). We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party sites you visit. 11. Children’s Data Our services are not directed toward individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided personal information, please contact us immediately for deletion. 12. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in law or business operations. The revised policy will be posted on this page with an updated “Last Updated” date. We recommend reviewing this policy periodically. 13. Contact Us If you have any questions or concerns about this Privacy Policy or our data practices, please contact: DanDee Consulting Kemp House, 160 City Rd, London EC1V 2NX, UK Email: info@pearllemongroup.com Phone (UK): +44 207 183 3436

• Full name
• Company name
• Email address
• Phone number
• Job title or role
• Project details or consultation requests
• Any data you voluntarily submit via forms (e.g., contact forms, newsletter sign-ups, consultation bookings)

• IP address
• Browser type and version
• Geographic location (based on IP)
• Device type and operating system
• Pages visited and time spent on site
• Referring website or search engine query

• Respond to enquiries and schedule consultations
• Provide and improve our Workday consulting services
• Send service-related or promotional emails (if consent has been given)
• Improve website performance and user experience
• Fulfil our legal and contractual obligations
• Ensure compliance with applicable laws, such as the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018

• Consent: When you provide explicit consent (e.g., signing up for marketing emails)
• Contractual necessity: To deliver consulting services you have requested
• Legal obligation: To comply with UK and EU legal or regulatory requirements
• Legitimate interests: For internal business analysis, communication, and service improvement, where your rights are not overridden

• Trusted third-party service providers (e.g., CRM, email marketing, analytics platforms)
• Legal authorities when required by law
• Workday-certified partners if directly relevant to the services we are delivering

• To provide services you’ve requested
• For legal, contractual, and financial record-keeping
• For ongoing client relationship management

• Access – Request a copy of the personal data we hold about you
• Rectification – Request corrections to inaccurate or incomplete data
• Erasure – Request deletion of your data ("right to be forgotten")
• Restriction – Request to limit how we use your data
• Data portability – Request your data in a structured, commonly used format
• Objection – Object to processing for direct marketing or legitimate interests
• Withdraw Consent – You may withdraw consent at any time where processing is based on consent

• Monitor site traffic and engagement
• Improve website usability and performance
• Track conversions (e.g., consultation bookings)

• SSL encryption on our website
• Access controls and authentication protocols
• Secure storage of client project data
• Regular reviews of security practices and data access