Privacy Policy

Last updated: September 2024

Introduction

comet-plover ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage with our services.

We are a data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered address is 47 Finsbury Square, London EC2A 1PQ, United Kingdom.

Information We Collect

Information You Provide

We collect information that you voluntarily provide to us, including:

• Contact information (name, email address, company name)
• Communication content when you contact us via forms or email
• Service preferences and project requirements
• Any other information you choose to provide

Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

• IP address and device identifiers
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses

How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and provide requested services
• To communicate with you about our services and updates
• To improve our website and user experience
• To comply with legal obligations
• To protect our rights and prevent fraud

Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: Where you have provided explicit consent for specific purposes
• Contract: Where processing is necessary for the performance of a contract
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal obligation: Where processing is necessary to comply with applicable laws

Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service providers who assist in our operations (hosting, analytics)
• Professional advisers (lawyers, accountants) when necessary
• Regulatory authorities when required by law

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Typical retention periods are:

• Contact form submissions: 3 years from last interaction
• Client project data: 7 years after project completion
• Website analytics: 26 months

Your Rights

Under UK data protection law, you have the following rights:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Request limitation of processing
• Portability: Request transfer of your data
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, please contact us at [email protected].

International Transfers

Your information may be transferred to and processed in countries outside the United Kingdom. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Address: 47 Finsbury Square, London EC2A 1PQ, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.