Privacy Policy

1. Scope of this policy

This Privacy Policy applies to personal information collected through this website and through the services we provide. In this policy, "we", "us", and "our" refer to [COMPANY LEGAL NAME], and "you" refers to any visitor to this website or user of our services.

We act as the controller of the personal information described below. This policy does not apply to third-party websites or services that we link to, which operate under their own policies.

2. Information we collect

Information you provide

We collect information you submit voluntarily, which may include:

• Name
• Email address
• Telephone number
• Business or organisation name and your role
• Details of the services you are interested in, your budget, and your timeline
• Any other information you choose to include in a free-text message

Information collected automatically

When you visit this website, certain information is collected automatically, which may include:

• IP address and approximate location derived from it
• Browser type, device type, and operating system
• Pages viewed, time spent, and the pages you arrived from and left to
• Referring website and marketing campaign parameters
• Date and time of your visit

Information we do not seek

We do not intentionally collect special category or sensitive personal information, such as data revealing health, racial or ethnic origin, religious beliefs, political opinions, or biometric identifiers. Please do not include such information in messages you send us.

3. How we use information

We use personal information to:

• Respond to your enquiries and provide the information you request
• Prepare quotes and proposals
• Provide, manage, and improve our services
• Administer accounts, invoicing, and payments
• Send service communications and, where you have opted in, marketing communications
• Understand how the website is used and improve its content and performance
• Detect, prevent, and address security issues, fraud, or misuse
• Comply with legal, tax, and regulatory obligations

We do not use personal information for automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

4. Legal bases for processing

Where data protection law requires a legal basis for processing (including under the UK GDPR and the EU GDPR), we rely on the following:

• Consent - for marketing communications and for non-essential cookies. You may withdraw consent at any time.
• Performance of a contract - to deliver services you have engaged us for, and to take steps at your request before entering into a contract.
• Legitimate interests - to respond to enquiries, operate and secure the website, and understand how it is used, provided those interests are not overridden by your rights.
• Legal obligation - to comply with applicable law, including record-keeping requirements.

5. Cookies and analytics

This website uses cookies and similar technologies, including a third-party analytics service that sets its own cookies to measure how the site is used. Analytics cookies help us understand which pages are visited, how visitors navigate the site, and where traffic comes from.

Analytics information is generally reported to us in aggregate. Depending on your settings and the service's configuration, an IP address or a device identifier may be processed as part of that measurement.

For a full description of the cookies used, their purposes, and how to control them, see our Cookie Policy.

6. How we share information

We do not sell personal information. We share it only in the circumstances below:

• Service providers. Vendors who perform services on our behalf - such as website hosting, data storage, analytics, email delivery, customer relationship management, and payment processing. They may access personal information only to perform those services and are bound by contractual confidentiality and security obligations.
• Professional advisers. Lawyers, accountants, insurers, and auditors, where necessary.
• Legal requirements. Where we are required to disclose information by law, court order, or a valid request from a public authority, or where disclosure is necessary to establish, exercise, or defend legal claims.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, in which case we will take reasonable steps to ensure the information remains protected.
• With your consent. For any other purpose disclosed to you at the time.

7. International transfers

Some of our service providers operate in countries other than your own. Where personal information is transferred internationally, we take steps to ensure an appropriate level of protection, which may include relying on adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

8. Data retention

We retain personal information only for as long as necessary for the purposes set out in this policy, including to satisfy legal, accounting, or reporting requirements. Relevant criteria include the nature of the information, the purpose for which it was collected, and applicable statutory retention periods.

Indicative retention periods:

• Enquiries that do not result in an engagement - [RETENTION PERIOD]
• Client and contractual records - [RETENTION PERIOD]
• Marketing subscribers - until you unsubscribe, plus a suppression record
• Website and analytics data - per the retention settings of the analytics service

When information is no longer needed, we delete it or anonymise it.

9. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, and unauthorised access. These include encryption of data in transit and access controls limiting who can view stored information.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Where a breach is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority as required by applicable law.

10. Your rights

Subject to applicable law and to any exemptions that may apply, you may have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Object to or request restriction of certain processing
• Request a copy of your information in a portable format
• Withdraw consent where processing is based on consent
• Opt out of marketing communications at any time
• Lodge a complaint with your local data protection authority

United States state privacy rights

Residents of certain US states may have additional rights, including the right to know what personal information is collected and how it is used, to access, correct, delete, and port that information, to opt out of the sale or sharing of personal information and of targeted advertising, and to appeal a decision on a rights request. We do not sell personal information as that term is defined under applicable state law.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before responding, and we will respond within the timeframe required by applicable law. You will not be discriminated against for exercising your rights. You may use an authorised agent, subject to proof of authority.

11. Children's privacy

This website and our services are directed at businesses and are not intended for children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Third-party links

This website may contain links to third-party websites, plug-ins, and applications. Following a link may allow third parties to collect or share information about you. We do not control those sites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every site you visit.

13. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Where changes are material, we will provide a more prominent notice. We encourage you to review this page periodically.