Website Privacy Policy

Purpose of This Policy

This Website Privacy Policy sets out how personal data is collected, used, stored and protected when individuals use our website. This policy has been reviewed to ensure compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and aligns with our internal Data Protection Policy and Record Keeping Policy.

Who We Are

We are the data controller responsible for personal data collected through this website. Our full contact details are available on the Contact Us page of the website.

Why We Collect Your Personal Data

We collect and use personal data to:

• Respond to enquiries and requests for information
• Provide information about our services that you have requested
• Manage website functionality and security
• Monitor and improve website performance and user experience

Our lawful bases for processing personal data are:

• Consent
• Legitimate interests
• Legal obligation

Who We Share Your Data With

We do not sell, rent, or trade personal data.

Personal data may be shared with trusted third-party service providers where necessary to operate and secure our website, including website hosting, form management, security, and analytics providers. All third parties are required to process data in accordance with UK GDPR and only on our instructions.

We do not share personal data with organisations outside the UK unless appropriate safeguards are in place.

What Happens If You Do Not Provide Personal Data

If you do not provide personal data when submitting an enquiry or contacting us, we may be unable to respond to your request or provide the information you have asked for.

How We Protect Your Data

We implement appropriate technical and organisational measures to protect personal data, including:

• Full SSL encryption (HTTPS)
• Secure, password-protected systems
• Restricted access to authorised personnel only
• Regular security monitoring and malware scanning

We do not store credit or debit card details on this website.

How Long We Store Your Data

In line with our Record Keeping Policy, personal data collected via the website is retained as follows:

• Enquiry data: up to 30 days if no further engagement takes place
• Customer-related data: retained in line with contractual and legal requirements
• Marketing data: retained until consent is withdrawn or you unsubscribe

Personal data is securely deleted when it is no longer required.

Where Your Data Is Held

Website data is stored on secure UK-based servers. We also use password-protected internal systems for customer management, sales, and invoicing, with access limited to authorised users only.

How We Collect Your Personal Data

Enquiry Forms

We use Gravity Forms to manage website enquiry forms. Data submitted via forms is used solely to respond to your enquiry. Form data is securely stored and automatically deleted after 30 days unless further contact is required. Access is restricted to authorised personnel.

Comments

When visitors leave comments on the website, we collect the information shown in the comments form, along with IP address and browser user agent data for spam prevention. An anonymised hash of your email address may be shared with the Gravatar service to display a profile image. Approved comments may be publicly visible.

Website Analytics

We use Google Analytics to collect anonymised information about how visitors use the website, including pages visited, time spent on the site, and navigation paths. This data does not identify individuals and is used solely to improve website performance.

Website Cookies

Cookies are small text files placed on your device to help the website function effectively.

Cookies are used to:

• Ensure website functionality
• Remember user preferences
• Monitor and analyse website usage

Cookies used on this website include:

Name of Provider	Name of Cookie	Purpose
Cloudflare	__cfduid	Security and performance
Google Analytics	_ga, _gid, _gat	Website usage and analytics

You can manage or delete cookies through your browser settings. Further information is available at www.aboutcookies.org.

Your Rights Over Your Personal Data

In accordance with UK GDPR, you have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to object
• Right to data portability
• Right to withdraw consent

How to Exercise Your Rights

Requests to exercise your rights should be made using the contact details provided on our website. We may need to verify your identity before responding.

How to Make a Complaint

If you have concerns about how your personal data is handled, you should contact us directly in the first instance.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk/concerns
Telephone: 0303 123 1113

Other Information

If you have any questions about this policy or how your personal data is used, please contact us via the website.