How we look after your personal data — in plain language.
Last updated: 9 September 2026
Bell Advisory is a professional practice website provided by PSA Studio (operated by Paul Smith, a sole trader based in Ayrshire, Scotland). In this policy, “we” and “us” mean PSA Studio, which is the data controller for the personal data described here. If you have a question about your data, email privacy@psastudio.org.
When you contact us, we may collect your name, business name, email address, phone number and the information you put in your enquiry.
If you use the Lean Business Process Assessment, your answers stay in your browser while you complete the questions and your score is shown before we ask for personal details. If you then choose to send your results or book a process review, we receive the assessment summary that accompanies your enquiry, including your score and identified opportunities, together with the contact details you submit.
We also keep basic technical and security logs needed to operate and protect the service. We do not sell your personal data and do not use your assessment or enquiry data to train AI models.
We use submitted assessment information to send your results, understand the process areas where your organisation may benefit from support, prepare for the review you requested and respond to your enquiry. We do not use assessment information for advertising.
The assessment produces an automated score and recommendations for your information. It does not make a legal, employment, credit or similarly significant decision about you.
Our UK GDPR Article 6 lawful bases depend on what you ask us to do:
We do not ask for, and do not need, special category data through the website or assessment. Please do not include health, ethnicity, political opinions or similarly sensitive personal information in free-text fields.
We use service providers to host and protect the website, store submitted enquiries and deliver service emails. Current technical components include Supabase, Netlify, Cloudflare and Brevo. They process data only as needed to provide the services we use. We review the services and safeguards we rely on as the system changes.
We use technical and organisational safeguards appropriate to the data and service, including encrypted connections, access controls, least-privilege access, multi-factor authentication where supported, tenant access controls, security monitoring and audit evidence.
If a personal-data breach requires notification under UK data-protection law, we will make the required notification within the applicable legal timeframe.
We keep enquiry and assessment information only for as long as it is needed to respond to you, deliver the requested service, maintain appropriate business records and meet legal obligations. Where an enquiry becomes paid work, some related records may need to be retained for longer for contractual, accounting or legal reasons. We periodically review retained information and delete it when it is no longer needed.
Some of our service providers may process data outside the United Kingdom. Where that happens, we rely on the transfer mechanism and safeguards required by UK data-protection law.
Depending on the circumstances, you can ask us for a copy of your personal data, ask us to correct or delete it, restrict its use, object to processing, or ask for data you supplied in a portable form. Where we rely on consent, you can withdraw it at any time.
Email privacy@psastudio.org to exercise a data-protection right. We will respond within the timeframe required by UK data-protection law.
You can also complain to the Information Commissioner’s Office if you are unhappy with how your personal data has been handled.
We use technology needed to operate and secure the service. If we introduce non-essential cookies or tracking that requires consent, we will ask before using it.
If we change this policy we will update the date at the top. If a change materially affects how we use information already collected, we will take any additional steps required by law.
PSA Studio (operated by Paul Smith, a sole trader based in Ayrshire, Scotland)
privacy@psastudio.org