1. Who we are (Data Controller)

The Data Controller responsible for your personal data is:

If you have questions about this policy or how we handle your data, please contact us using the details above.

2. What personal data we collect

• Name
• Contact information (email address, phone number, postal address)
• Demographic information such as postal or ZIP code
• Account or login details (if applicable)
• Communication preferences
• Information submitted through forms, surveys, or support requests
• Technical data such as IP address, browser type, operating system, device information
• Website usage data (pages visited, interactions, cookies)

We do not collect special categories of personal data unless required and with your explicit consent.

3. How we collect your data

• When you provide it to us directly (e.g., contact forms, product use, creating an account)
• Automatically through cookies and analytics when you use our website
• Through customer support interactions
• When you sign up to receive marketing communications

4. Legal basis for processing

Where we rely on consent, you may withdraw it at any time by contacting us or using the unsubscribe link in our emails.

5. How we use your information

• Provide and support our products and services
• Maintain internal records
• Improve our website, products, and user experience
• Send service updates, security notices, or product information
• Send marketing emails or newsletters (only with consent)
• Carry out analytics and market research
• Customise website content for your interests

We do not sell or lease your personal data.

6. Marketing communications

We may send you marketing communications if you have opted in to receive them, or if you are an existing customer and we have a legitimate interest in contacting you. You can opt out at any time by clicking “unsubscribe” in our emails or by contacting us at privacy@example.com.

7. Cookies

We use cookies and similar technologies to improve your experience and analyse website usage. Some cookies are essential for site functionality; others require your consent.

You can manage or disable non-essential cookies using the cookie banner or your browser settings. For more details, see our Cookie Policy.

8. Sharing your data

We may share your data only with:

• Trusted service providers who process data on our behalf (e.g., hosting, email delivery, analytics)
• Professional advisors (legal, accounting, regulatory)
• Authorities where required by law

All service providers are bound by data processing agreements and may not use your data for their own purposes. We do not sell personal data to third parties.

9. International transfers

If your data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place such as the UK Adequacy Regulations/EU Adequacy Decisions or Standard Contractual Clauses (SCCs). You may contact us for details of the specific safeguards applied.

10. Data retention

• Customer account records: retained until account deletion plus any applicable regulatory period
• Marketing data: retained until you withdraw consent or request deletion
• Website analytics data: typically up to 26 months
• Support enquiries: up to 24 months after resolution

When retention is no longer required, data is securely deleted or anonymised.

11. Keeping your information secure

We use physical, technical, and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, or alteration. Examples include secure servers, encryption, access controls, and staff training.

12. Your rights under GDPR

• Right of access – request a copy of the data we hold about you
• Right to rectification – correct inaccurate or incomplete data
• Right to erasure – request deletion of your data where legally permitted
• Right to restrict processing
• Right to object – including to direct marketing
• Right to data portability
• Right to withdraw consent at any time

To exercise any of these rights, contact us at privacy@example.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or your local data protection authority.

13. Children’s data

Our website and services are not directed at children under 16, and we do not knowingly collect data from children. If you believe a child has provided data to us, please contact us so we can delete it.

14. Links to other websites

Our website may contain links to other sites. We are not responsible for the privacy practices of external websites, and this policy does not apply to them. We encourage you to review their privacy notices.

15. Changes to this policy

We may update this policy periodically. Any changes will be posted on this page with an updated “Last updated” date. We recommend checking this policy from time to time to stay informed.

Contact