GDPR Compliance

Last updated: 13 August 2026

Our commitment to data protection

We are committed to protecting your personal data and respecting your privacy rights under the UK General Data Protection Regulation and Data Protection Act 2018.

Data controller

For the purposes of data protection law, we are the data controller responsible for your personal information.

Your rights under GDPR

Right to access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.

Right to rectification

You have the right to request correction of any personal data you believe is inaccurate. You also have the right to request completion of incomplete data.

Right to erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.

Right to restrict processing

You have the right to request restriction of processing your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to data portability

You have the right to request transfer of your personal data to another organization or directly to you in a structured, commonly used, and machine-readable format.

Right to object

You have the right to object to processing of your personal data in certain circumstances, including processing based on legitimate interests or for direct marketing purposes.

Rights related to automated decision making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you.

How to exercise your rights

To exercise any of these rights, please contact us at: [email protected]

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of the extension.

Data we collect

We collect and process the following categories of personal data:

• Identity data: name
• Contact data: email address, postal address
• Inquiry data: service interests, project details
• Technical data: IP address, browser type, device information
• Usage data: how you interact with our website

Legal basis for processing

We only collect and process your personal data when we have a legal basis to do so:

• Consent: you have given clear consent for processing
• Contract: processing is necessary to fulfill a contract with you
• Legal obligation: processing is necessary to comply with law
• Legitimate interests: processing is necessary for our legitimate interests and does not override your rights

Data retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

Inquiry data: 2 years from last contact

Client project data: 7 years from project completion

Marketing consent data: until consent is withdrawn

Data security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

International transfers

Your personal data may be transferred to and processed in countries outside the UK. When we do this, we ensure appropriate safeguards are in place to protect your data.

Data breach notification

In the event of a personal data breach likely to result in high risk to your rights and freedoms, we will notify you without undue delay.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

ICO contact information:
Website: ico.org.uk
Helpline: 0303 123 1113

Updates to this notice

We may update this GDPR compliance notice from time to time. Significant changes will be communicated through our website.