Privacy Policy & Telemetry Notice

1. Data Controller Identification

The data controller responsible for the processing of personal information on this platform is:

2. Scope & Categories of Information Collected

We adhere strictly to the principle of data minimization as prescribed under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018. We collect information only when there is a legitimate operational basis, explicit consent, or statutory necessity:

• Directly Disclosed Data: When you complete our contact dispatch form or communicate via email, we collect your full name, business email address, organization name, inquiry category, and the contents of your message.
• Automated Telemetry & Server Logs: When accessing our services, our edge infrastructure automatically logs request metadata including your Internet Protocol (IP) address (which is truncated and pseudonymized), browser architecture, operating system, referrer URL, request timestamps, and HTTP response codes.
• Cookie Identifiers: Minimal persistent or session-based state tokens placed on your device to store interface preferences and cookie consent status. Please refer to our Cookie Governance page for precise taxonomy.

3. Legal Bases for Data Processing

Under Article 6 of the UK GDPR, we process personal data exclusively under the following lawful foundations:

• Legitimate Interests (Art. 6(1)(f)): Processing server logs to maintain web infrastructure stability, detect malicious penetration attempts, and safeguard network integrity.
• Explicit Consent (Art. 6(1)(a)): Processing inquiry transmissions and optional non-essential analytics cookies when you proactively opt in.
• Legal Obligation (Art. 6(1)(c)): Retaining transaction or inquiry records where mandated by United Kingdom corporate, taxation, or audit statutes.

4. Third-Party Sub-Processors & Infrastructure Providers

We do not sell, rent, monetize, or trade your personal data. We utilize reputable technical infrastructure partners who act strictly as data processors under binding Data Processing Addenda (DPAs):

• Edge Hosting & Content Delivery: Secure edge hosting facilities located within the United Kingdom and European Economic Area providing encrypted static file delivery and DDoS mitigation.
• Email Routing: Transactional mail dispatch relays operating under TLS 1.3 encryption protocols.

5. International Data Transfers

Where technical operations require data transfer outside the United Kingdom or European Economic Area, such transfers are governed by UK International Data Transfer Agreements (IDTAs) or European Commission Standard Contractual Clauses (SCCs), accompanied by transfer impact assessments to ensure equivalent protections.

6. Retention Schedules

Personal data is retained only for as long as necessary to fulfill the operational purposes for which it was assembled:

• General Contact Inquiries: Retained for 24 months following resolution of the communication, then permanently purged from production databases.
• Server Diagnostic Logs: Retained for a rolling period of 90 days for forensic monitoring, after which log files are deleted automatically.
• Cookie Preference Tokens: Stored locally in your client browser for 365 days unless cleared earlier by the user.

7. Data Subject Rights (GDPR & CCPA)

Depending on your jurisdiction, you are entitled to exercise the following legal prerogatives:

• Right of Access: You may request a copy of the personal data held about you in an accessible format.
• Right to Rectification: You may request immediate correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where retention is no longer justified.
• Right to Restriction & Objection: You may restrict processing or object to processing carried out under legitimate interest grounds.
• Right to Data Portability: You may request transfer of your provided data to another service provider.
• California Consumer Privacy Act (CCPA) Rights: California residents have the right to know the categories of data collected, request deletion, and opt out of any data sharing. We explicitly confirm that we do not sell personal data.

To submit an inquiry or exercise your legal rights, dispatch an electronic request to our Data Protection Officer at [email protected]. We will respond within 30 statutory days.

8. Supervisory Authority Recourse

If you believe our data handling practices violate applicable privacy legislation, you have the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.