Privacy Policy

Last updated: 19.09.2026

Who we are

This website is operated by Anup Pala Packaging Consultancy Ltd, trading as Anup Pala Packaging Consultancy, company number [company number], registered office at 108 Malvern Road, CB1 9LD Cambridge ("I", "me", "we" or "the business"). I am the data controller for the personal data described in this policy.

If you have any questions about this policy or how your data is handled, contact me at anup_pala@hotmail.com or by phone on +44 (0) 7834 327720.

The personal data I collect

I collect personal data in a few ways:

Information you give me directly

•                 Contact and inquiry form: name, email address, company name and the details of your inquiry, when you submit the contact form on this website

•                 Phone or email correspondence: anything you share with me if you call or email directly

•                 [If applicable] Newsletter sign up: your name and email address, if you choose to subscribe to updates

Information collected automatically

•                 Usage data: pages visited, time spent on the site, referring website, approximate location (from IP address), device and browser type, collected via Squarespace's built in analytics and Google Analytics

•                 Advertising data: information collected by the Meta (Facebook and Instagram) Pixel, used to measure the effectiveness of advertising and to show relevant ads to people who have visited this site

•                 Cookies: see the Cookie Policy below for the full list of cookies used and what they do

How I use your data

I use personal data for the following purposes:

•                 To respond to inquiries submitted through the contact form or by phone or email

•                 To provide, discuss and deliver packaging consultancy services you've asked about or engaged me for

•                 To understand how visitors use this website, and to improve its content and performance

•                 To run and measure the effectiveness of online advertising, including retargeting previous visitors

•                 [If applicable] To send occasional updates or newsletters, only if you've opted in

•                 To meet legal, accounting or regulatory obligations

Legal basis for processing

Under UK GDPR, I rely on the following legal bases:

•                 Consent, for non essential cookies, analytics and advertising tracking, and any marketing emails, you can withdraw consent at any time

•                 Legitimate interests, for responding to inquiries and understanding how the website is used, in a way that doesn't override your rights and interests

•                 Contract, where processing your data is necessary to deliver services you've engaged me for

•                 Legal obligation, where I need to keep records for tax, accounting or other legal requirements

Who I share your data with

I don't sell personal data. I share data with a small number of service providers who help run this website and business, each of whom only processes data on my instructions:

•                 Squarespace, Inc., website hosting, forms and built in analytics

•                 Google LLC, Google Analytics for website usage analytics

•                 Meta Platforms, Inc., Meta Pixel for advertising and retargeting on Facebook and Instagram

•                 [If applicable] Email or CRM providers used to manage inquiries and client communication

•                 Professional advisers, such as an accountant, where necessary

Some of these providers are based in, or process data in, the United States. Where that happens, they do so under approved safeguards such as the UK's International Data Transfer Addendum or equivalent Standard Contractual Clauses.

How long I keep your data

I keep inquiry and client data for as long as needed to respond to your inquiry, deliver any services agreed, and meet legal or accounting requirements, generally no longer than [6 years] after the end of our last contact or engagement, in line with standard UK record keeping requirements. Analytics data is retained according to Google Analytics' and Squarespace's own default retention settings, unless changed.

Your rights

Under UK GDPR, you have the right to:

•                 Access the personal data I hold about you

•                 Ask me to correct inaccurate or incomplete data

•                 Ask me to delete your data, in certain circumstances

•                 Ask me to restrict or object to processing, in certain circumstances

•                 Ask for your data to be provided to you in a portable format

•                 Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact me at [contact email address]. If you're not satisfied with how I've handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Children's privacy

This website and its services are aimed at businesses and professionals. I don't knowingly collect personal data from children, and this site isn't intended for use by anyone under 18.

Changes to this policy

I may update this policy from time to time, for example if I add a new tool or service to the website. The "last updated" date at the top of this page will always reflect the most recent version.