Privacy Policy Effective Date: [Insert Date] Last Updated: [Insert Date] 1. Introduction [Company Name] (“we”, “our”, or “us”) is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you: Visit our website. Contact us. Purchase our products or services. Subscribe to newsletters. Apply for employment. Interact with us in any other way. We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK privacy laws.
2. Who We Are Company Name: Registered Address: Company Registration Number: Email: Telephone: If applicable: Data Protection Officer: Email:
3. Information We Collect Depending on how you use our website, we may collect: Information You Provide Name Email address Telephone number Company name Postal address Payment information Any information submitted through forms or correspondence Information Collected Automatically IP address Browser type Device information Operating system Pages visited Time spent on pages Referring websites Cookies and similar technologies Information From Third Parties We may receive information from: Payment providers Marketing partners Analytics providers Publicly available sources Social media platforms where permitted
4. How We Use Your Information We use your personal data to: Provide products and services. Respond to enquiries. Process payments. Manage customer accounts. Deliver customer support. Improve our website. Personalise your experience. Send service updates. Send marketing communications (where permitted). Prevent fraud. Comply with legal obligations. Protect our legal rights.
5. Legal Basis for Processing We process personal data under one or more of the following lawful bases: Your consent. Performance of a contract. Compliance with legal obligations. Legitimate business interests. Protection of vital interests where applicable.
6. Marketing We may send promotional emails where: You have consented; or We are legally permitted to do so under PECR. You may unsubscribe at any time using the unsubscribe link or by contacting us.
7. Cookies Our website uses cookies to: Improve website functionality. Remember preferences. Analyse website traffic. Improve security. Deliver advertising where applicable. Please see our separate Cookie Policy for full details.
8. Sharing Your Information We may share your information with: Payment processors IT service providers Website hosting providers Cloud storage providers Professional advisers Regulators Law enforcement agencies Delivery partners We require third parties to process data securely and only for authorised purposes.
9. International Transfers Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including: UK International Data Transfer Agreements UK Addendum to Standard Contractual Clauses Adequacy Regulations Other lawful transfer mechanisms
10. Data Security We use appropriate technical and organisational measures including: Encryption Secure hosting Access controls Password protection Firewalls Staff training Regular security reviews While we take reasonable steps to protect personal data, no internet transmission can be guaranteed to be completely secure.
11. Data Retention We retain personal information only for as long as necessary to: Provide our services. Meet legal obligations. Resolve disputes. Enforce agreements. Retention periods vary depending on the type of information collected.
12. Your Rights Under UK GDPR you may have the right to: Access your data. Correct inaccurate data. Erase your data. Restrict processing. Object to processing. Data portability. Withdraw consent. Lodge a complaint with the Information Commissioner’s Office (ICO).
13. Children’s Privacy Our website is not intended for children under 13 unless specifically stated. We do not knowingly collect children’s personal information.
14. Third-Party Websites Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.
15. Changes to This Policy We may update this Privacy Policy from time to time. Changes will be published on this page with a revised effective date.
16. Contact Us For privacy enquiries please contact: Company Name Email: Telephone: Postal Address:
17. Complaints You have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk However, we would appreciate the opportunity to address your concerns before you contact the ICO.
Payment disputes, cancellations, refunds, delivery, warranties, ownership of goods, limitation of liability.
Cookie Policy
Compliance with PECR and UK GDPR, explaining cookie use and user choices.
Website Disclaimer
Limits responsibility for inaccuracies, third-party links, downtime, reliance on website content, and external resources.
Acceptable Use Policy
Prevents misuse of forms, uploads, spam, hacking attempts, and abusive behaviour.
Copyright & Intellectual Property Notice
Protects website content, logos, graphics, software, and branding.
Data Processing Agreement
Needed if you process personal data on behalf of business clients.
Accessibility Statement
Helps demonstrate compliance with accessibility expectations and informs users about accessible features.
Automated decision-making and AI (if you use AI tools to process enquiries or provide services).Fraud prevention and security monitoring, stating that you monitor activity to detect abuse or unlawful access.Business transfers, explaining that customer data may be transferred if the company is sold, merged, or restructured.Legal claims, confirming you may retain or process personal data where necessary to establish, exercise, or defend legal claims.Website analytics, clarifying the use of anonymised or aggregated analytics to improve services.Record retention for legal compliance, specifying that certain records may be retained beyond account closure where required by law.Data accuracy, encouraging users to keep their information up to date.Identity verification, explaining that you may request proof of identity before responding to data subject rights requests.Law enforcement and regulatory disclosures, stating that you may disclose information where legally required or to protect rights, property, or safety.Version control, identifying the policy version and review date to demonstrate good governance.