Privacy Policy

We follow privacy by design: we keep data to a minimum, are clear about why we need it, and use secure transport (HTTPS/TLS). We only collect what is needed for the stated purpose.

We ask for consent where it is legally required, with timestamps and lawful-basis metadata. Marketing consent is always separate and optional. We never add you to marketing automatically.

We avoid asking for personal information we do not need. Sensitive personal data is never collected through ordinary lead generation forms unless it is specifically required and legally justified.

We support retention rules and data deletion workflows. Data is kept only as long as it is needed for its purpose.

We support subject access requests. You can ask to see, correct or delete your personal data.

We tell the difference between consumer and organisation marketing. Automated direct marketing to natural persons needs prior consent. Every marketing message identifies the sender and offers a simple, free opt-out. We keep track of consent status, opt-outs, suppression lists and campaign history.

We keep processor and subprocessor documentation ready and review vendors before onboarding them.