02 / The legal grounds
Lawful Bases and Retention
Each use has a reason.
UK data protection law requires us to have a lawful basis for using personal information. The basis depends on the context and the purpose of the processing.
forum
Business enquiries
We rely on legitimate interests to respond to business enquiries, assess a requested discussion and maintain a proportionate record of our communications. We consider your rights and interests when we do this.
handshake
Work you ask us to do
Where you ask us to take steps before entering an agreement, or we provide services under a contract, we use relevant information to take those steps or meet our contractual obligations.
gavel
Legal requirements
Some records may need to be retained or shared to meet a legal obligation, respond to a lawful request or establish, exercise or defend legal claims.
thumb_up
Consent, where needed
We ask for consent where the law requires it, including for any optional cookies or similar technologies that need permission. You can withdraw consent at any time.
Retention is purpose-led. If an enquiry becomes an engagement, we may retain relevant records for the contract, legal obligations or resolving a dispute. Access to records is limited to people who need them.
03 / Who helps operate the site
Processors and International Transfers
We keep supplier access scoped.
We may use service providers to host the website, deliver business email, maintain security or provide site measurement tools if enabled. They process information only on our instructions, under written terms that address confidentiality and data protection.
| Provider type |
Possible role |
Safeguard |
| Website hosting |
Store and serve site content, and support service security and availability. |
Contractual processing instructions and access controls. |
| Business email |
Route and store messages sent to or from our business email account. |
Provider terms and account security controls. |
| Site measurement tools, if enabled |
Help us understand site performance and usage. |
Optional technologies are used only where the required consent has been obtained. |
Some service providers may process information outside the UK. Where a restricted international transfer applies, we use a permitted transfer mechanism and appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as applicable. Contact us if you would like more detail about a specific transfer or safeguard.
04 / Your choices
Your Rights
You can ask us to act.
Depending on the circumstances, the UK GDPR gives you the rights below. Some rights have conditions, and exceptions can apply. We will explain our decision if we cannot meet a request in full.
- AccessAsk for a copy of your personal information and details about how we use it.
- RectificationAsk us to correct inaccurate information or complete information that is incomplete.
- ErasureAsk us to delete information where the law gives you that right.
- RestrictionAsk us to limit how we use information in certain situations.
- ObjectionObject to processing based on legitimate interests, including where your particular situation gives grounds.
- PortabilityAsk for certain information you provided to us in a commonly used, machine-readable format, where the right applies.
- Withdraw consentWithdraw consent at any time where we rely on it. This does not affect processing that took place before withdrawal.
To make a request, email [email protected] or use our contact page. Please tell us what you need and which email address or enquiry it relates to. We may ask for information to confirm your identity before responding. We normally respond within one month of receiving a valid request; complex requests may take longer where the law permits, and we will tell you if that applies.
05 / Site operation
Cookies and Security
Optional means your choice.
cookie
Cookies and similar technologies
Some technologies are needed for basic site operation. Optional analytics cookies or similar tools, if used, should run only after you have given consent where required. You can change a recorded choice using the cookie settings control if it is displayed on the site, or manage cookies in your browser.
lock
Security measures
We use measures suited to the information and the risks, including encrypted transmission where supported, controlled account access and limiting internal access to people who need it. No online transmission or storage can be guaranteed completely secure.
Cookie choices and practical steps
add
If a cookie banner or settings control appears, use it to review or change optional cookie choices. If no settings control is available, you can adjust or remove cookies through your browser settings. Blocking essential cookies may affect some site functions.
Browser controls do not automatically withdraw consent already recorded by a separate consent tool. If you cannot find a settings control, contact us and we will explain the available route for changing your choice.