PRIVACY POLICY.

1. Who we are

This website is run by Gareth Shaw Digital Agency Ltd ("we", "us"), a company registered in England and Wales (company number 17097722), registered office 1 Cardale Park, Beckwith Head Road, Harrogate, HG3 1RY. We are the data controller for the personal data described in this policy and are registered with the Information Commissioner's Office (ICO) under registration number ZC188264.

For any privacy question or request, email hello@garethshaw.uk.

2. What we collect

When you contact us through the website form, we collect the details you choose to give us: your name, work email address, company name, telephone number, whether you are a founder or growing firm, your team size, and your message. We also record the date and time of your enquiry and your IP address, which we use to prevent spam and abuse.

When you email or message us directly (including by WhatsApp or LinkedIn), we collect the details contained in your message.

When you visit the website, our hosting provider's servers automatically record standard technical information such as your IP address, browser type, the pages requested and the time of the request. These server logs are used to keep the site secure and working.

3. How we use it, and our lawful basis

• To reply to your enquiry and discuss whether and how we can help. Our lawful basis is our legitimate interest in responding to business enquiries and, where you are asking about our services, taking steps at your request before entering into a contract.
• To protect the website and the form from spam, abuse and security threats. Our lawful basis is our legitimate interest in keeping our systems secure.
• To deliver our services if you become a client. Our lawful basis is the performance of our contract with you or your organisation.

We do not use your data for marketing mailing lists, we do not sell it, and we do not use it for automated decision-making or profiling.

4. Cookies and analytics

This website does not set cookies and does not use analytics or advertising tracking. Fonts and images are served from our own website, so browsing the site does not send your data to third-party services.

5. Who we share it with

We only share personal data with service providers who help us run the website and our business, and only as far as they need it:

• our website hosting provider, which stores the website, enquiry records and server logs;
• our email provider, through which enquiries are delivered and answered;
• trusted contractors who work with us on a client engagement, under confidentiality obligations, where this is needed to deliver the work.

We may also disclose data where required by law. Where any provider processes data outside the UK, we make sure appropriate safeguards are in place, such as the UK's adequacy regulations or standard contractual clauses.

6. How long we keep it

We keep enquiry details for 24 months from your last contact with us, then delete them, unless you become a client, in which case we keep the records we need for the engagement and for our legal and accounting obligations. IP addresses used for spam prevention are kept for one hour in our rate-limiting records, and with your enquiry record for the same 24 months. Server logs are kept for the period set by our hosting provider.

7. How we protect it

We use appropriate technical and organisational measures to protect personal data, including encrypted (HTTPS) connections, restricted access to enquiry records and keeping our systems up to date.

8. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data;
• ask us to restrict or stop using your data, or object to our use of it based on legitimate interests;
• ask for your data in a portable format, where applicable.

To make a request, email hello@garethshaw.uk. We will respond within one month. There is normally no charge.

9. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

10. Links to other websites

This website links to other sites, such as the products in our case studies and LinkedIn. We are not responsible for their privacy practices, so please read their policies.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.