Article 6 of the GDPR ("General Data Protection Regulation") defines your rights over our processing of your personal information. The GDPR requires us to declare which of six "lawful bases" we are relying on when we are processing your personal data: we operate on the basis of "consent" when sending marketing emails (you won't get sent a newsletter unless you have explicitly opted in to receive one) and we operate on the basis of "legitimate interest" when communicating with you in other ways (e.g. when responding to your enquiry).
We use Google Analytics to track how people use our website so that we can continually improve the service we provide. We use Google Analytics to monitor how our website is being used so we can make improvements. Our use of Google Analytics requires us to pass to Google your IP address (but no other information) - Google uses this information to prepare site usage reports for us, but Google may also share this information with other Google services. In particular, Google may use the data collected to contextualize and personalise advertising on its advertising network.
We store all customer data in a Hubspot CRM system hosted online. Hubspot is fully GDPR compliant and as a controller of your data within our CRM, we are required to provide evidence that our processes are compliant and followed in each case. Read more on their practices here.
By providing personal information such as your name and email address and phone number via the forms on this website (from Hubspot), you agree to us contacting you to respond in line with the preferences you specify. Some forms on our website also include options to control your marketing preferences. We will always apply your most recent instruction, either specified using the forms or in an email. Every email we send you includes an unsubscribe link and comes from our Hubspot CRM which is GDPR compliant.
From time to time we may pass personal data such as your name and email address to other services that we use to operate our business. However, your personal data will remain in the United Kingdom, or countries considered by United Kingdom law to have equivalent policies such as Jersey, Guersey, Switzerland, New Zealand and Canada. Companies based in the USA that have certified with the EU-US Privacy Shield programme are also considered to be permitted destinations by the United Kingdom (including GSuite, Dropbox, ActiveCampaign and Hotjar ).
If you have any questions or concerns about how your data is processed, please contact us using the details on this website. If you’d like to understand more about your rights, take a look at the UK Information Commissioner’s Office website: https://ico.org.uk/concerns/.