Privacy Policy

1. Data Controller

The data controller for this website is:

2. Data We Collect

We may collect the following categories of data:

• Contact form submissions: name, email address, and the content of the message you send us via the contact form.
• Usage data: anonymised data about how you interact with the site, including pages visited, approximate geographic region, browser type, and session duration. This data is collected via analytics cookies only if you have consented.
• Technical data: IP address, browser type and version, time zone, referring URLs, and other technical data automatically collected by our hosting infrastructure for security and operational purposes.

We do not collect sensitive personal data (as defined in Article 9 of the UK GDPR).

3. Purposes and Legal Basis

4. Data Retention

We retain personal data only for as long as is necessary for the purposes set out in this policy:

• Contact form submissions are retained for up to 12 months from the date of submission, after which they are securely deleted.
• Technical and security logs are retained for up to 90 days.
• Analytics data (if consented) is retained in anonymised form and may be held for up to 24 months.

5. Third Parties

We do not sell, rent, or trade personal data to third parties. We may share data in the following limited circumstances:

• Hosting and infrastructure providers: Our hosting provider processes technical data as part of delivering the website. This is governed by a Data Processing Agreement.
• Analytics providers: Where you have consented to analytics cookies, anonymised usage data may be processed by a third-party analytics provider.
• Legal requirements: We may disclose personal data where required to do so by law or in response to a valid request from a public authority.

6. International Transfers

Where personal data is transferred outside the United Kingdom or European Economic Area, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses or reliance on adequacy decisions. We will not transfer personal data to a country lacking adequate protections under applicable law.

7. Your Rights

Under applicable data protection law, you have the following rights:

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, disclosure, or destruction. These include encrypted transmission over HTTPS, access controls, and routine security reviews. No transmission over the internet is entirely secure; we cannot guarantee absolute security.

9. Policy Changes

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this page periodically. Continued use of the site after changes constitutes acceptance of the revised policy.