Privacy Policy
How we collect, use, and protect your personal information
Introduction
blossom-magpie ("we", "our", "us") is committed to protecting your privacy and handling your personal data responsibly. This privacy policy explains how we collect, use, store, and protect information when you interact with our website and services.
We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website or engaging our services, you acknowledge that you have read and understood this policy.
Information We Collect
We may collect the following categories of personal information:
- Contact details including name, email address, postal address, and organisation name when you submit enquiry forms
- Information about your property or organisation relevant to consulting services you request
- Communication records including emails and notes from telephone conversations
- Technical data including IP addresses, browser type, and device information collected automatically when you visit our website
- Cookie data as described in our separate Cookies Policy
How We Use Your Information
We process your personal data for the following purposes:
- Responding to enquiries and providing information about our services
- Delivering consulting services you have engaged us to provide
- Administering our business relationship including invoicing and contract management
- Improving our website functionality and user experience
- Complying with legal obligations and professional requirements
Legal Basis for Processing
We rely on the following lawful bases for processing your personal data:
- Consent: Where you have provided explicit consent for specific processing activities
- Contract: Where processing is necessary to perform a contract with you or take pre-contractual steps at your request
- Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
- Legal obligation: Where processing is required to comply with applicable laws
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is typically retained for two years unless you engage our services, in which case project records are retained for seven years in accordance with professional and legal requirements. You may request earlier deletion subject to our legal obligations.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission, secure storage systems, access controls, and regular security assessments.
Your Rights
Under data protection legislation, you have the following rights:
- Right to access your personal data and obtain a copy
- Right to rectification of inaccurate or incomplete data
- Right to erasure in certain circumstances
- Right to restrict processing in certain circumstances
- Right to data portability for data you have provided
- Right to object to processing based on legitimate interests
- Right to withdraw consent where processing is based on consent
To exercise any of these rights, please contact us using the details provided below.
Third-Party Disclosure
We do not sell your personal data to third parties. We may share data with service providers who assist our operations, such as IT support and hosting providers, under appropriate contractual safeguards. We may also disclose data where required by law or to protect our legal rights.
International Transfers
Your personal data is primarily processed within the United Kingdom. If any processing involves transfer outside the UK, we ensure appropriate safeguards are in place in accordance with data protection legislation.
Changes to This Policy
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website. We encourage you to review this policy regularly.
Contact Us
For questions about this privacy policy or to exercise your data protection rights, please contact us:
blossom-magpie
45 Queen Street
Edinburgh EH2 3NH
United Kingdom
Email: [email protected]
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.
Last updated: September 2024