Privacy Policy

1. Introduction

[Company Legal Name] ("we", "us", or "our") is a UK-based software delivery and managed engineering teams business. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are committed to protecting your privacy and ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide to Us

When you contact us through our website contact form, we collect the following information:

• Name
• Email address
• Phone number
• Company name
• Message content

2.2 Information Collected Through Scheduling Tools

If you use our book-a-call or scheduling tools, we may collect additional information such as your preferred meeting times, timezone, and any additional details you provide during the scheduling process.

2.3 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Pages you visit and time spent on pages
• Referring website addresses
• Date and time of your visit

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide customer support
• To schedule and manage consultations and meetings
• To send you information about our services (with your consent or where we have a legitimate interest)
• To improve our website and services
• To analyse website usage and trends through analytics tools
• To comply with legal obligations
• To protect our rights and prevent fraud

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following lawful bases:

• Consent: When you provide explicit consent for marketing communications
• Legitimate Interest: For B2B communications, website analytics, and business development activities where we have a legitimate business interest
• Contract Performance: To fulfil our obligations when you engage our services
• Legal Obligation: To comply with applicable laws and regulations

5. Analytics

We use analytics tools, including Google Analytics, to understand how visitors interact with our website. These tools collect information such as page views, time on site, and user interactions. This data helps us improve our website and services.

Google Analytics uses cookies and similar technologies. You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser settings.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party vendors and processors who assist us in operating our website and providing our services (e.g., hosting providers, email service providers, analytics providers)
• Sub-processors: Our service providers may use sub-processors to assist in delivering services to us
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with any merger, sale of assets, or acquisition

All third-party processors are contractually obligated to protect your data and use it only for the purposes we specify.

7. International Data Transfers

Some of our service providers may be located outside the UK and European Economic Area (EEA). When we transfer your personal data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
• Adequacy decisions by the UK government
• Other appropriate safeguards as required by UK GDPR

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods are:

• Contact Form Submissions: Retained for 3 years from the date of submission, unless you become a client
• Client Data: Retained for the duration of our business relationship plus 7 years for legal and accounting purposes
• Marketing Communications: Retained until you opt-out or withdraw consent
• Analytics Data: Retained in aggregated and anonymised form

9. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection
• ISO 27001 and Cyber Essentials certifications

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to certain conditions)
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [INSERT PRIVACY CONTACT EMAIL]. We will respond to your request within one month.

11. Cookies

Our website uses cookies and similar tracking technologies. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with UK GDPR. You can contact the ICO at ico.org.uk.