Privacy policy

1. Data controller

The data controller responsible for your personal data is:

Company No. , registered in England & Wales.
Registered office: .
Contact: .

2. What personal data we collect

We only collect the minimum personal data needed to respond to you and to operate our services.

When you submit the contact form: your name, email address, and any information you choose to include in the company, country, and message fields.

When you email us directly: your email address, name (if provided), and the contents of your message.

Automatically when you visit the site: standard server and request metadata (IP address, user agent, timestamp, requested URL) via our hosting provider's logs. This data is used for security, abuse prevention, and aggregate analytics.

We do not knowingly collect any special-category data (health, political opinions, biometrics, etc.). Please do not include such data in contact-form messages.

3. How we use your personal data

We use personal data only for the purposes listed below, each tied to a lawful basis under the UK GDPR:

• Responding to enquiries. Lawful basis: legitimate interests (operating our business and replying to people who contact us).
• Delivering agreed services. Where we enter a consulting engagement, processing is carried out on the lawful basis of the performance of a contract with you or your organisation.
• Meeting our legal obligations. Keeping business records required by UK company law and tax law. Lawful basis: legal obligation.
• Protecting the website. Preventing abuse, spam, and fraud. Lawful basis: legitimate interests.

We do not sell personal data, and we do not use it for automated decision-making with legal or similarly significant effects.

4. Sharing with processors

We share personal data only with service providers that process it on our behalf under contract, and only to the extent necessary to operate the site:

• Hosting and CDN: our website is served via a UK/EU-region CDN, which processes request metadata.
• Form delivery: contact-form submissions are delivered to our email via a third-party form relay provider.
• Email: replies are sent and stored through a commercial email provider.
• Embedded map: the contact page embeds a map from a third-party map provider, which may set its own cookies. See the cookies policy for detail.

All processors are bound by written terms that require them to protect your data and to process it only under our instructions. Transfers outside the UK, where they occur, rely on the UK International Data Transfer Agreement or equivalent safeguards.

5. How long we keep data

Contact-form enquiries: retained for up to 24 months from last correspondence, then deleted unless we have an ongoing relationship.

Contract and invoice records: retained for 6 years after the end of the engagement, as required by UK tax and company law.

Server logs: retained for up to 30 days for security and troubleshooting, then deleted or aggregated.

6. Your rights

Under the UK GDPR you have the right to:

• Ask for a copy of the personal data we hold about you (right of access).
• Ask us to correct inaccurate data (right to rectification).
• Ask us to delete your data where there is no overriding lawful reason to keep it (right to erasure).
• Ask us to restrict or object to how we process your data.
• Ask us to transfer your data to another provider in a portable format.
• Withdraw any consent you have previously given.

To exercise any of these rights, email . We aim to respond within one calendar month.

7. Complaints

If you are not satisfied with how we have handled your data, you have the right to complain to the UK Information Commissioner's Office (ICO):

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Website: ico.org.uk · Helpline: 0303 123 1113.

We would, however, appreciate the chance to address your concern directly first.

8. Security

We apply reasonable and proportionate technical and organisational measures to protect personal data, including TLS for all site traffic, least-privilege access to administrative systems, and the principle of minimum data collection.

9. Children

Our services are aimed at business customers. We do not knowingly solicit personal data from children under the age of 13. If you believe a child has submitted personal data to us, please contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will change when we do. Material changes will be announced on the home page or by email to active clients.