Legal Document

Privacy & Data Protection Notice

We are committed to safeguarding your personal information and maintaining transparency about how your data is processed. This notice explains our practices in accordance with UK data protection legislation and GDPR requirements.

Updated January 2025 • UK GDPR Compliant

Introduction & Purpose

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access our services.

What Personal Data We Collect

We may collect the following types of personal information:

Identity Data: Name, username, title
Contact Data: Email address, telephone numbers, postal address
Technical Data: IP address, browser type, device information, time zone settings
Usage Data: Information about how you use our website and services
Marketing Data: Your preferences in receiving marketing from us
Transaction Data: Details about payments and services you have purchased

How We Use Personal Data

We use your personal data for the following purposes:

  • To provide and maintain our services
  • To process and fulfil your requests and transactions
  • To communicate with you about updates, offers, and promotional materials
  • To improve our website, products, and services
  • To comply with legal obligations and protect our legal rights
  • To detect, prevent, and address technical issues or fraudulent activity

Legal Basis (GDPR)

Under UK GDPR, we rely on the following lawful bases for processing your personal data:

Consent

Where you have given clear consent for us to process your personal data for a specific purpose.

Contract

Where processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.

Legal Obligation

Where processing is necessary for us to comply with the law.

Legitimate Interests

Where processing is necessary for our legitimate interests or a third party's legitimate interests, unless there is a good reason to protect your personal data which overrides those legitimate interests.

Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and understand where our visitors come from.

Essential Cookies:Required for the website to function properly. These cannot be disabled.
Analytics Cookies:Help us understand how visitors interact with our website by collecting and reporting information anonymously.
Marketing Cookies:Used to track visitors across websites to display relevant advertisements.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Third-Party Sharing

We may share your personal data with the following categories of third parties:

  • Service Providers: Companies that provide services on our behalf, such as payment processing, data analysis, email delivery, and customer service
  • Professional Advisers: Lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services
  • Regulatory Authorities: Government bodies and regulators who require reporting of processing activities in certain circumstances

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell your personal data to third parties.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

6 Years

Financial and transaction records for tax and accounting purposes

3 Years

Customer communication records and service history

Until Withdrawal

Marketing preferences (until you opt out)

In some circumstances, we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

SSL/TLS encryption for data in transit
Encrypted data storage at rest
Access controls and authentication
Regular security assessments

Your Rights Under GDPR

Under UK GDPR, you have the following rights regarding your personal data

Right to Access

Request copies of your personal data

Right to Rectification

Request correction of inaccurate data

Right to Erasure

Request deletion of your personal data

Right to Restrict

Request restriction of processing

Right to Portability

Request transfer of your data

Right to Object

Object to processing of your data