September 1, 2026
Your privacy matters. This page explains, in plain language, how The Exploration Group Ltd handles personal information when you use explorationgroup.org or contact us. We wrote it so you can understand what we collect, why we collect it, how long we keep it, and what rights you have — whether you are a prospective client, a supplier, a banking or compliance reviewer, or simply browsing our site.
We keep this policy under review as our services and tools evolve. If anything material changes, we will update this page and revise the “Last updated” date at the bottom.
1. Who we are (data controller)
1.1 The data controller responsible for personal data described in this Privacy Policy is:
THE EXPLORATION GROUP LTD
Company number: 13678452 Registered in England and Wales
Registered office: C/O Redwood Accountants, Eastlands Court Business Centre, St. Peters Road, Rugby, England, CV21 3QP
Operational address: 29 Mindaro Way, Ashlawn Gardens, Rugby, Warwickshire, CV22 5GJ, United Kingdom
1.2 In this policy, “TEG”, “we”, “us”, and “our” mean THE EXPLORATION GROUP LTD.
1.3 We operate the website explorationgroup.org (the “Site”) as our corporate and governance website. We also operate specialised digital brands and services under this company (for example regional and Website-as-a-Service brands described on our Site). Where a brand website has its own privacy notice, that notice will apply to that brand site in addition to, or instead of, this policy for activity on that brand site. This policy applies to explorationgroup.org and to personal data you send us through this Site (including our contact form and corporate email addresses).
1.4 We have not appointed a statutory Data Protection Officer under Article 37 UK GDPR, because we are not required to do so. Privacy and data-protection enquiries are handled by our privacy contact:
Email: privacy@explorationgroup.org
You may also write to us at our registered office, marked “Privacy”, or email info@explorationgroup.org or elliot@explorationgroup.org.
2. Scope of this policy
2.1 This Privacy Policy explains how we collect and process personal data when you:
(a) visit or browse the Site;
(b) submit our online contact form;
(c) email us at an @explorationgroup.org address;
(d) correspond with us about our services, brands, partnerships, press, suppliers, or compliance matters; or
(e) exercise your data-protection rights.
2.2 This policy is intended to meet requirements under:
(a) the UK General Data Protection Regulation (“UK GDPR”);
(b) the Data Protection Act 2018; and
(c) the Privacy and Electronic Communications Regulations 2003 (“PECR”), as applicable (including rules about cookies and electronic marketing).
2.3 This Site is not intended for children (see section 12).
2.4 This policy does not cover third-party websites we link to. Their privacy terms apply when you leave our Site.
3. Personal data we collect
3.1 “Personal data” means information that identifies you or can be linked to you.
3.2 Depending on how you interact with us, we may process the following categories of personal data:
(a) Identity and contact data — name; business email address; organisation or company name; job title if you choose to provide it; postal address if you include it in correspondence.
(b) Enquiry data — subject line; enquiry type; message content; any attachments or details you voluntarily send; records of our replies.
(c) Technical and usage data — IP address; browser type and version; device type; operating system; referring URL; pages viewed; dates and times of access; approximate location derived from IP (city/region level); diagnostic logs.
(d) Cookie and similar technology data — identifiers and preferences set via cookies, pixels, or local storage, as described in our Cookie Policy.
(e) Communication preferences — any choices you express about how we should contact you (we do not run a marketing mailing list from the corporate contact form).
(f) Transactional or contractual data — if you later become a client or supplier, information needed to deliver services, billing, and support (often collected under a separate agreement or brand process).
(g) Compliance data — information you provide for banking, due diligence, supplier onboarding, or legal requests.
3.3 We do not actively seek special category data (such as health, religion, or biometric data) through the Site. Please do not submit special category data via the contact form. If you do so unsolicited, we will delete it where appropriate unless we need to retain it to handle your request lawfully.
3.4 We do not publish a public telephone number on the Site in Phase 1 of our corporate presence. If you ask us to call you, you may include a number in your message; we will use it only to respond to that enquiry.
4. How we collect personal data
4.1 We collect personal data:
(a) Directly from you — when you complete forms, email us, or otherwise contact us.
(b) Automatically — when you visit the Site, through server logs, security tools, analytics (if enabled), and cookies or similar technologies.
(c) From service providers — for example hosting, security, form, and email delivery providers that process technical data on our behalf.
(d) From public sources — only where relevant and lawful (for example Companies House or your business website) if you are engaging with us as a business contact.
5. Purposes of processing and lawful bases
5.1 We only process personal data when we have a lawful basis under UK GDPR. The main bases we rely on are:
(a) Legitimate interests (Article 6(1)(f)) — running and securing our Site; responding to enquiries; improving our services; defending legal claims; basic business development with other businesses, where your interests do not override ours.
(b) Contract / steps prior to contract (Article 6(1)(b)) — where processing is necessary to take steps at your request before entering a contract, or to perform a contract with you.
(c) Legal obligation (Article 6(1)(c)) — where we must process data to comply with law (for example accounting, tax, or responding to lawful requests).
(d) Consent (Article 6(1)(a)) — where we rely on consent (for example certain non-essential cookies, or if we ever ask for consent for electronic marketing). You may withdraw consent at any time without affecting prior lawful processing.
5.2 Typical purposes include:
| Purpose | Examples of data | Primary lawful basis |
| — | — | — |
| Responding to contact-form and email enquiries | Identity, contact, enquiry data | Legitimate interests; contract steps where applicable; consent acknowledgement via form checkbox where used |
| Operating, securing, and troubleshooting the Site | Technical, log, security data | Legitimate interests |
| Understanding Site usage (if analytics enabled) | Technical, cookie data | Consent for non-essential cookies where required; legitimate interests for strictly necessary processing |
| Managing client/supplier relationships | Identity, contact, contractual data | Contract; legitimate interests; legal obligation |
| Compliance, banking verification support, and legal claims | Identity, contact, correspondence | Legitimate interests; legal obligation |
| Improving our website and services | Aggregated/technical data | Legitimate interests |
5.3 Our legitimate interests include operating a legitimate UK digital business, protecting our systems against misuse, and communicating efficiently with people who contact us. We balance these interests against your rights and expectations.
5.4 We do not use the corporate contact form to add you to a marketing list. If we introduce email marketing in future, we will do so in line with PECR and UK GDPR (including consent or soft opt-in where applicable) and will say so clearly at the point of collection.
6. Our contact form
6.1 The Site contact form (powered by Forminator Pro on WordPress) may collect: full name; business email; organisation (optional); enquiry type; subject; message; and a required privacy acknowledgement/consent checkbox.
6.2 Form submissions are stored in our WordPress/Forminator submissions area and emailed to our operations mailbox info@explorationgroup.org (and processed by our email and hosting providers). We may send you an automated confirmation email when you submit the form.
6.3 We use form data to route and respond to your enquiry, keep a business record of the correspondence, and improve how we handle similar requests.
7. Cookies and similar technologies
7.1 We use cookies and similar technologies on the Site. Some are strictly necessary for the Site to function and security to operate. Others (for example analytics or preference cookies) are used only where allowed — typically with your consent via our cookie banner, where required.
7.2 For details of cookie categories, purposes, and how to manage preferences, please see our Cookie Policy: /cookie-policy
7.3 You can also control cookies through your browser settings. Blocking some cookies may affect Site functionality.
8. Who we share personal data with
8.1 We do not sell your personal data.
8.2 We may share personal data with:
(a) Service providers (processors) who help us run the Site and business under contract, which may include:
- website hosting and infrastructure (for example Hostinger);
- content management and plugins (for example WordPress, Elementor, WPMU DEV tools including Forminator);
- email hosting and delivery;
- security, backup, and performance tooling;
- analytics providers (only if/when enabled);
- professional advisers (accountants, lawyers, insurers) where needed;
- payment or accounting platforms if you become a paying client (for example Stripe, PayPal, Xero — used in our wider operations).
(b) Group operations — authorised personnel who need access to handle your request (including operations staff working under our instruction).
(c) Authorities and legal — courts, regulators, or law enforcement where required or permitted by law.
(d) Business transfers — if we restructure, sell, or transfer relevant assets, data may transfer under appropriate safeguards.
8.3 Processors may only process personal data on our documented instructions and must implement appropriate security measures.
9. International data transfers
9.1 We aim to host primary website and business data in the UK and/or EEA where practicable.
9.2 Some providers may process data in, or allow access from, countries outside the UK. Where we transfer personal data internationally, we implement appropriate safeguards required by UK GDPR, such as:
(a) transferring to countries covered by UK adequacy regulations; and/or
(b) using the UK International Data Transfer Agreement (IDTA) or Addendum to the EU Standard Contractual Clauses, and carrying out transfer risk assessments where required.
9.3 You can contact privacy@explorationgroup.org for more information about safeguards relevant to your data.
10. How long we keep personal data
10.1 We keep personal data only as long as needed for the purposes set out in this policy, including legal, accounting, or reporting requirements.
10.2 Typical retention periods (guide only — we may adjust where a longer or shorter period is justified):
(a) Contact form and general enquiry correspondence — usually up to 24 months after our last meaningful contact, unless the enquiry becomes a client matter or a dispute.
(b) Client/supplier records — for the life of the relationship and then typically 6 years thereafter (UK limitation and accounting practice), unless a different period applies in contract.
(c) Server logs and security logs — often 30–180 days, unless needed longer to investigate incidents.
(d) Cookie consent records — for the period needed to demonstrate compliance (often up to 12–24 months, depending on tool settings).
10.3 When data is no longer required, we delete or irreversibly anonymise it where feasible.
11. Security
11.1 We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, or alteration. These may include HTTPS/TLS, access controls, least-privilege permissions, password protections, malware/security scanning, and backups.
11.2 No method of transmission over the internet is completely secure. We cannot guarantee absolute security, but we work to protect your information using measures appropriate to the risk.
11.3 If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO and, where legally required, affected individuals, in accordance with UK GDPR.
12. Children
12.1 The Site and our corporate services are directed at businesses and adults. We do not knowingly collect personal data from children under 13 (and our services are not aimed at under-18s).
12.2 If you believe a child has provided us with personal data, contact privacy@explorationgroup.org and we will take appropriate steps to delete it.
13. Your rights under UK GDPR
13.1 Subject to legal limitations, you have the right to:
(a) Access — request a copy of personal data we hold about you;
(b) Rectification — request correction of inaccurate or incomplete data;
(c) Erasure — request deletion in certain circumstances (“right to be forgotten”);
(d) Restriction — request that we restrict processing in certain circumstances;
(e) Data portability — receive certain data in a structured, commonly used format, where applicable;
(f) Object — object to processing based on legitimate interests, and to processing for direct marketing;
(g) Withdraw consent — where processing is based on consent, withdraw it at any time;
(h) Complain — lodge a complaint with the supervisory authority (see section 15).
13.2 To exercise your rights, email privacy@explorationgroup.org with enough detail for us to verify your identity and understand your request. We may need additional information to confirm identity before responding.
13.3 We aim to respond within one month of receipt. We may extend by up to two further months for complex or multiple requests; if so, we will tell you within one month.
13.4 We do not charge a fee for most requests. We may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive, in line with UK GDPR.
14. Third-party links and brand sites
14.1 The Site may link to third-party websites, including partner tools or social platforms. We are not responsible for their content or privacy practices.
14.2 Our portfolio brands may operate separate websites or portals (for example service desks or CRM environments). Those properties may present additional privacy information. Please read the notice on the site you are using.
15. Complaints
15.1 Please contact us first at privacy@explorationgroup.org so we can try to resolve your concern.
15.2 You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk
ICO helpline: 0303 123 1113
16. Changes to this Privacy Policy
16.1 We may update this Privacy Policy from time to time. The “Last updated” date at the bottom of this page shows when it was last revised.
16.2 Material changes will be indicated by updating this page. Where appropriate and feasible, we may provide additional notice (for example a Site notice or email if we are in active correspondence with you).
17. How to contact us
17.1 Privacy and data-rights requests: privacy@explorationgroup.org
17.2 General enquiries: info@explorationgroup.org
17.3 Director / statutory contact: elliot@explorationgroup.org
17.4 Postal: THE EXPLORATION GROUP LTD
C/O Redwood Accountants, Eastlands Court Business Centre
St. Peters Road, Rugby, England, CV21 3QP United Kingdom
(Please mark the envelope “Privacy”.)
17.5 Website: https://explorationgroup.org
If you have questions about this policy, we would rather you ask than wonder — email privacy@explorationgroup.org and we will help.
Last updated: 1 September 2026
About this page
Learn how we protect your personal information and ensure your privacy while using our website.
Check other pages