Privacy Policy
Last updated: DATE
Who we are
This site and the services described on it are operated by LEGAL ENTITY, registered at REGISTERED ADDRESS. For anything in this policy, that’s the entity you’re dealing with — and the contact point for any question is PRIVACY EMAIL.
Data we collect
We collect what you give us directly — name, email, company and project details — through forms like our contact page and newsletter sign-up. We also collect analytics data about how the site is used (pages viewed, rough location, device type) and, where you choose to use it, transcripts of conversations with the chatbot on this site.
Why we process it, and our lawful bases
We process enquiry and project data to respond to you and, if you become a client, to deliver the work — under contract or legitimate interest. Analytics runs only under your consent, set through the cookie banner. Marketing emails, like our monthly notes, go only to people who’ve opted in, and that consent can be withdrawn at any time.
California residents
If you’re a California resident, the CCPA and CPRA give you the right to know what personal information we hold, to request its correction or deletion, and to opt out of its sale — which is straightforward here, because we don’t sell personal information. To exercise any of these rights, email PRIVACY EMAIL.
Cookies
We use a small number of cookies, described in full in our Cookie Policy. You choose whether analytics cookies run the first time you visit, and you can change that choice at any time from the cookie policy page.
How long we keep data
Enquiry and project data is kept for as long as it’s needed for the relationship, plus a period to meet our own legal and accounting obligations, typically X years. Analytics data is retained in aggregate or anonymised form after a shorter period. Anything kept longer than that has a specific reason, not inertia.
Who processes it for us
A small number of processors handle data on our behalf, each under its own data-processing agreement: to complete: hosting provider, to complete: analytics provider, to complete: CRM and to complete: email/newsletter provider. We choose processors that meet UK/EU GDPR standards and review that list periodically.
International transfers
Some of our processors may store or process data outside the UK/EEA. Where that happens, we rely on an approved transfer mechanism — such as Standard Contractual Clauses — so your data carries an equivalent level of protection wherever it sits.
Your rights and how to exercise them
Under UK/EU GDPR you can ask to access, correct, delete or export your data, restrict or object to certain processing, and withdraw consent at any time. Email PRIVACY EMAIL and we’ll respond within the timeframe the law requires. If you’re not satisfied with our answer, you can complain to your local data protection authority.
Changes to this policy
We’ll update this page whenever what we actually do changes, and update the date at the top when we do. For anything material, we’ll look for a clearer way to tell you than a quietly changed date.