Privacy Policy

This Privacy Policy explains how personal data is collected, used, shared, stored, and protected in connection with the provision of services to all customers in the area. It applies to all customers in the area and is designed to meet the requirements of the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our services, you acknowledge that your personal data may be processed as described in this Policy.

1. Data We Collect

We collect only the personal data that is necessary for the purposes described in this Policy. Depending on how you interact with us, we may collect the following categories of data:

Identity data: name, title, and similar identifiers.
Contact data: address, email address, and telephone number.
Transaction data: details about services purchased, billing records, and payment-related information.
Technical data: internet protocol address, device identifiers, browser type, operating system, and usage logs.
Usage data: information about how you access and use our services.
Communication data: records of correspondence, enquiries, complaints, and other interactions.
Preference data: choices relating to service settings or communication preferences.

We do not intentionally collect special category data unless it is strictly required and you provide it voluntarily or as required by law. Where special category data is processed, we will ensure an appropriate lawful basis and additional safeguards apply.

2. How We Use Personal Data

We use personal data for the following purposes:

to provide, manage, and deliver our services;
to process payments, invoices, and other transactions;
to verify identity and prevent fraud or misuse;
to comply with legal, tax, accounting, and regulatory obligations;
to respond to enquiries, complaints, and support requests;
to improve service quality, maintain records, and monitor performance;
to protect the rights, property, and safety of customers, staff, and third parties;
to send operational communications where necessary for service delivery;
to manage internal administration and business continuity.

We will only use personal data where it is lawful to do so and in ways that are fair, transparent, and limited to specific purposes.

3. Lawful Basis for Processing

Under GDPR, we rely on one or more lawful bases depending on the context of processing. These include:

Contract

We process personal data where it is necessary to enter into or perform a contract with you, including to deliver services, manage orders, and complete related administration.

Legal Obligation

We process personal data where required to comply with legal duties, including tax, accounting, consumer protection, and other regulatory obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Legitimate interests may include fraud prevention, service improvement, security monitoring, internal reporting, and business management.

Consent

In limited situations, we may rely on your consent. Where consent is used, it will be informed, specific, freely given, and capable of being withdrawn at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

Vital Interests

In rare cases, we may process data to protect someone’s vital interests, such as in an emergency situation.

Public Interest or Official Authority

Where applicable, processing may be based on public interest or the exercise of official authority.

4. Data Sharing and Processors

We may share personal data with trusted processors and service providers who act on our instructions and are bound by contractual confidentiality and data protection obligations. Processors may include providers of:

IT hosting and cloud services;
data storage and backup solutions;
payment processing and invoicing services;
customer support and communication systems;
analytics, security, and monitoring tools;
professional services such as legal, accounting, or audit support.

We may also share data with other third parties where required by law, court order, regulatory request, or to establish, exercise, or defend legal claims. We do not sell personal data.

Where personal data is transferred outside the European Economic Area, we will ensure appropriate safeguards are in place, such as an adequacy decision, standard contractual clauses, or other lawful transfer mechanisms.

5. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. Retention periods are determined by the nature of the data, the purpose of processing, contractual requirements, and legal obligations.

When deciding how long to retain data, we consider:

the duration of our relationship with you;
whether there is a continuing business need;
statutory limitation periods;
tax, employment, and financial record requirements;
potential disputes or claims;
security and audit obligations.

When personal data is no longer required, we will either delete it securely or anonymise it so that it can no longer be associated with an identifiable individual.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption, secure storage, staff training, and regular review of our procedures. Although we take reasonable steps to protect data, no system can be guaranteed to be completely secure.

7. Your Rights Under GDPR

As a data subject, you have a number of rights in relation to your personal data. Subject to legal conditions and exemptions, you may have the right to:

Access your personal data and receive a copy of it;
Rectification of inaccurate or incomplete personal data;
Erasure of personal data in certain circumstances;
Restriction of processing in certain circumstances;
Data portability for data you have provided to us, where technically feasible and legally applicable;
Object to processing based on legitimate interests or direct marketing;
Withdraw consent at any time where processing is based on consent;
Not be subject to solely automated decision-making that has legal or similarly significant effects, where applicable.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been infringed. We encourage you to review your rights carefully and exercise them where appropriate.

8. Exercising Your Rights

Requests to exercise data protection rights should be made using the available service channels. We may need to verify your identity before responding to a request in order to protect your privacy and security. We will respond within the time limits required by GDPR, generally within one month, unless the request is complex or numerous, in which case the period may be extended as permitted by law.

9. Children’s Data

Our services are not intended for children unless specifically stated otherwise. We do not knowingly collect personal data from children without appropriate authority or consent where required. If we become aware that personal data has been collected in error, we will take steps to delete it or seek the necessary permission.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data practices. Any updated version will apply from the date it is made available. We encourage you to review this Policy periodically so that you remain informed about how your data is handled.

11. Scope of This Policy

This Privacy Policy applies to all customers in the area and governs the processing of personal data connected with our services in that area. If there is any conflict between this Policy and applicable law, applicable law will prevail. Nothing in this Policy limits the rights granted to you under GDPR or other relevant legislation.

In summary: we process personal data only where necessary, on a lawful basis, with appropriate safeguards, for clear purposes, and for no longer than needed. We are committed to respecting privacy, protecting data, and supporting your rights in a transparent manner.