1. What personal information we collectWe may collect and process the following personal data:

• Identity and contact data: name, email address, postal address, telephone number (e.g. when you fill in forms, subscribe, or contact us).

• Technical data: IP address, browser type and version, time zone setting, operating system and platform, device information.

• Usage data: information about how you use our website, pages visited, time and date of visits, referral sources.

• Marketing and communications data: your preferences for receiving marketing from us.

We do not collect special categories of personal data (such as health, race, religion) unless strictly necessary and with appropriate safeguards.We do not knowingly collect personal data from children under 16.2. How we collect your personal data

• Directly from you (e.g. forms, emails, account creation).

• Automatically through cookies and similar technologies (see our Cookie Policy).

• From third parties (e.g. analytics providers like Google Analytics).

3. How we use your personal dataWe use your personal data for the following purposes:

• To provide and maintain our website and services.

• To respond to your enquiries or requests.

• To improve our website and user experience (e.g. analytics).

• To send you marketing communications (only where we have your consent or it is otherwise permitted).

• To comply with legal obligations.

• To protect our rights, property, or safety.

4. Lawful basis for processingWe rely on the following lawful bases under UK GDPR:

• Consent (where you have given it, e.g. for marketing emails—you can withdraw consent at any time).

• Contract (where necessary to perform a contract with you).

• Legal obligation (where we must comply with the law).

• Legitimate interests (e.g. running our website, basic analytics, fraud prevention), provided your rights do not override these interests.

5. Sharing your personal dataWe may share your personal data with:

• Service providers (e.g. hosting, email, analytics) acting as processors under strict contracts.

• Professional advisers (e.g. lawyers, accountants).

• Regulators, courts, or law enforcement when required by law.

We do not sell your personal data to third parties.6. International transfersIf we transfer your data outside the UK, we ensure appropriate safeguards are in place (e.g. UK International Data Transfer Agreement or adequacy decisions).7. Data securityWe use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction.8. How long we keep your dataWe retain personal data only for as long as necessary for the purposes set out in this policy and to meet any legal, accounting, or reporting requirements.Typical retention periods:

• Enquiry/contact form data: up to 2 years

• Marketing subscribers: until you unsubscribe

• Analytics data: usually up to 26 months (often anonymised)

9. Your rightsUnder UK GDPR you have the right to:

• Access your personal data

• Correct inaccurate data

• Erase your data (in certain circumstances)

• Restrict processing

• Object to processing (including for direct marketing)

• Data portability

• Not be subject to automated decision-making with legal effects

To exercise these rights, contact us at the email address above. We will respond within one month (extendable in complex cases).You also have the right to complain to the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk/make-a-complaint
Helpline: 0303 123 111310. MarketingWe will only send electronic marketing with your consent or where permitted by law (soft opt-in). You can unsubscribe at any time via the link in our emails or by contacting us.11. Third-party linksOur website may contain links to third-party sites. We are not responsible for their privacy practices.12. Changes to this policyWe may update this policy from time to time. Changes will be posted here with an updated date.13. Contact us