Skip to content

Privacy, stated plainly

Privacy Notice

A data analytics supplier should be able to explain its own data handling plainly. This UK GDPR privacy notice explains what S.W.P. Cognition collects through this website, why we use it and the choices and rights you have.

Raise a data protection question

01 / What comes in

Information We Collect and Why

We collect what the conversation needs.

This notice covers visits to this website, enquiries sent through contact forms and the correspondence that follows. It does not describe client analytics project data: that is handled under the written arrangements agreed for each engagement, where the client determines the purposes and means of processing.

Details you provide

A contact form may ask for your name, organisation, role, email address, telephone number, sector and a description of your project. We use these details to reply, prepare for a requested consultation and keep a record of the discussion.

Basic website information

Our hosting and site systems may record technical details such as your IP address, approximate location, device and browser type, pages requested and access times. We use these records to deliver the site, diagnose faults and understand which information is useful.

Information Why we use it Usual retention
Enquiry and contact details To answer your request and arrange any follow-up you ask for. Up to 12 months after the last meaningful contact, unless another need applies.
Consultation and correspondence notes To keep an accurate record of what you asked us to consider or discuss. Normally up to 12 months after the last meaningful contact if no engagement follows.
Technical access records To maintain site operation, investigate errors and protect against misuse. Only for the period needed for those purposes, subject to hosting system settings.

If you become a client, we may keep relevant business and project records for the engagement and any legal or accounting period that applies. We review retention and securely delete or anonymise information when we no longer need it.

02 / The legal grounds

Lawful Bases and Retention

Each use has a reason.

UK data protection law requires us to have a lawful basis for using personal information. The basis depends on the context and the purpose of the processing.

Business enquiries

We rely on legitimate interests to respond to business enquiries, assess a requested discussion and maintain a proportionate record of our communications. We consider your rights and interests when we do this.

Work you ask us to do

Where you ask us to take steps before entering an agreement, or we provide services under a contract, we use relevant information to take those steps or meet our contractual obligations.

Legal requirements

Some records may need to be retained or shared to meet a legal obligation, respond to a lawful request or establish, exercise or defend legal claims.

Consent, where needed

We ask for consent where the law requires it, including for any optional cookies or similar technologies that need permission. You can withdraw consent at any time.

Retention is purpose-led. If an enquiry becomes an engagement, we may retain relevant records for the contract, legal obligations or resolving a dispute. Access to records is limited to people who need them.

03 / Who helps operate the site

Processors and International Transfers

We keep supplier access scoped.

We may use service providers to host the website, deliver business email, maintain security or provide site measurement tools if enabled. They process information only on our instructions, under written terms that address confidentiality and data protection.

Provider type Possible role Safeguard
Website hosting Store and serve site content, and support service security and availability. Contractual processing instructions and access controls.
Business email Route and store messages sent to or from our business email account. Provider terms and account security controls.
Site measurement tools, if enabled Help us understand site performance and usage. Optional technologies are used only where the required consent has been obtained.

Some service providers may process information outside the UK. Where a restricted international transfer applies, we use a permitted transfer mechanism and appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as applicable. Contact us if you would like more detail about a specific transfer or safeguard.

04 / Your choices

Your Rights

You can ask us to act.

Depending on the circumstances, the UK GDPR gives you the rights below. Some rights have conditions, and exceptions can apply. We will explain our decision if we cannot meet a request in full.

  • AccessAsk for a copy of your personal information and details about how we use it.
  • RectificationAsk us to correct inaccurate information or complete information that is incomplete.
  • ErasureAsk us to delete information where the law gives you that right.
  • RestrictionAsk us to limit how we use information in certain situations.
  • ObjectionObject to processing based on legitimate interests, including where your particular situation gives grounds.
  • PortabilityAsk for certain information you provided to us in a commonly used, machine-readable format, where the right applies.
  • Withdraw consentWithdraw consent at any time where we rely on it. This does not affect processing that took place before withdrawal.

To make a request, email [email protected] or use our contact page. Please tell us what you need and which email address or enquiry it relates to. We may ask for information to confirm your identity before responding. We normally respond within one month of receiving a valid request; complex requests may take longer where the law permits, and we will tell you if that applies.

05 / Site operation

Cookies and Security

Optional means your choice.

Cookies and similar technologies

Some technologies are needed for basic site operation. Optional analytics cookies or similar tools, if used, should run only after you have given consent where required. You can change a recorded choice using the cookie settings control if it is displayed on the site, or manage cookies in your browser.

Security measures

We use measures suited to the information and the risks, including encrypted transmission where supported, controlled account access and limiting internal access to people who need it. No online transmission or storage can be guaranteed completely secure.

06 / Speak to us

Contact and Complaints

We will deal with your concern directly.

Contact S.W.P. Cognition about this notice, a rights request or a question about how we handle personal information.

Postal address

9 Robert Cameron Mews
Colchester, Essex
CO4 9AL
United Kingdom

Notice version 1.0. If our information practices change, we will update this page and revise the review information here.