1. Who we are
This website is operated by Swaysbuddybord Media Ltd, a company registered in England and Wales under company number 15873241, with its registered address at Suite 3, 14 Station Parade, Harrogate, North Yorkshire, HG1 1TT, United Kingdom. We are the data controller for personal data processed through this website. You can contact us at [email protected].
2. Data we collect
- Contact form data: your name, email address, enquiry topic and message when you contact us.
- Technical data: IP address, browser type, device type and pages requested, recorded in server logs by our hosting provider for security and reliability.
- Consent and preference data: your cookie choices and, if you allow functional storage, the values you enter in the Will It Run? calculator. These are stored in your own browser's local storage, not on our servers.
- Analytics data: only if you consent, aggregated information about pages visited and time on site.
We do not ask for, and ask you not to send, sensitive categories of personal data. We do not sell personal data.
3. How and why we use data
We use contact form data to respond to your enquiry (legal basis: legitimate interests, or steps prior to entering a contract). We use technical data to keep the site secure and working (legitimate interests). We use analytics data to improve our guides (consent). You may withdraw consent at any time by changing your preferences or clearing your browser storage.
4. Cookies and local storage
We use a small number of essential and optional storage items. Full details, including a table of each item and instructions for opting out, are in our Cookie Policy.
5. Third-party processors
We use carefully selected service providers who process data on our behalf under written data processing agreements: a web hosting and content delivery provider, an email service provider that receives contact form messages, and — only where you consent — an analytics provider. Where a processor is located outside the UK or European Economic Area, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.
6. Your rights under UK and EU GDPR
You have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
7. Your rights under the CCPA / CPRA
If you are a California resident, you have the right to know what personal information we collect and how it is used, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.
8. Retention
Contact form messages are kept for up to 24 months after our last correspondence, then deleted. Server logs are retained for up to 30 days. Aggregated analytics data is retained for up to 14 months. Local storage items remain in your browser until you clear them or change your preferences.
9. Security
We use encrypted connections (HTTPS), restrict access to personal data to people who need it, and review our processors' security measures. No method of transmission is completely secure, but we take reasonable steps to protect your data.
10. Data Protection Officer
Our Data Protection Officer can be contacted at [email protected] or by post at our registered address, marked “For the attention of the Data Protection Officer”. We aim to respond to rights requests within one month.
11. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when it last changed. Significant changes will be highlighted on this page.