Privacy Policy

1. Information We Collect

• Contact Information: Email addresses, names, and messages submitted through our contact forms.
• Technical Data: IP addresses, browser type, device information, and website usage analytics.
• Project Data: Information shared during consultations, project requirements, and business objectives.
• Communication Records: Email correspondence, meeting notes, and project documentation.

2. How We Use Your Information

• Service Delivery: To provide consulting, design, and development services as agreed.
• Communication: To respond to inquiries, provide project updates, and maintain client relationships.
• Improvement: To analyse website usage and improve our services and user experience.
• Legal Compliance: To meet legal obligations and protect our legitimate business interests.

3. Data Sharing & Third Parties

• Service Providers: We use Supabase for data storage. These providers have their own privacy policies.
• No Sale of Data: We never sell, rent, or trade your personal information to third parties.
• Legal Requirements: We may disclose information if required by law or to protect our rights.
• Business Transfers: In the event of a merger or acquisition, data may be transferred to the new entity.

4. Data Security & Retention

• Security Measures: We implement appropriate technical and organisational measures to protect your data.
• Retention Period: Contact form data is retained for 2 years. Project data is retained for 7 years for legal and business purposes.
• Data Deletion: You can request deletion of your personal data, subject to legal retention requirements.
• Breach Notification: We will notify affected users and authorities of any data breaches as required by law.

5. Your Rights (GDPR & UK GDPR)

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data in certain circumstances.
• Portability: Request transfer of your data to another service provider.
• Objection: Object to processing of your data for direct marketing or legitimate interests.
• Restriction: Request restriction of processing in certain circumstances.

6. Cookies & Analytics

• Essential Cookies: We use necessary cookies for website functionality.
• Analytics: We may use analytics tools to understand website usage patterns.
• No Tracking: We do not use invasive tracking or advertising cookies.
• Browser Settings: You can control cookie preferences through your browser settings.

7. International Transfers

Your data may be processed in countries outside the UK/EU where our service providers operate. We ensure appropriate safeguards are in place for such transfers.

8. Updates to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated via email or website notice. Continued use of our services constitutes acceptance of updated terms.

9. Contact & Complaints

For privacy-related questions or to exercise your rights, contact us at scott@productofexperience.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).