Return and Refund Policy

Privacy Policy & Security Statement

1. Introduction

We value your privacy and are committed to protecting your personal data. This policy explains how and why we collect, process, store, share, and protect your personal data when you use our website, in compliance with applicable UK law—including the UK GDPR, Data Protection Act 2018, and the Data (Use and Access) Act 2025 (DUAA).

2. Information We Collect

• Personal Data: such as name, email, address, contact      details, and other information you submit.
• Usage Data: IP address, browser type, pages      visited—collected with cookies and similar technologies.

3. Lawful Basis for Processing

We process personal data only when we have a valid lawful basis:

• Consent – when you explicitly agree
• Contract – to deliver services you request
• Legal Obligations – when      required by law
• Legitimate Interests – for our      business operations, balanced against your rights and interests WikipediaDLA Piper Data Protection

4. Purposes of Processing

• Providing and personalizing our services
• Communicating updates, responding to inquiries
• Legal and regulatory compliance
• Protecting our rights and preventing fraud

5. Automated Decision-Making

If we use automated decision-making (ADM)—decisions made without human involvement—we will:

• Inform you clearly,
• Provide a way to challenge decisions,
• Offer human review when requested GOV.UK

6. Children’s Data

For services likely accessed by children, we have taken additional steps to protect and support them in line with DUAA requirements GOV.UK.

7. Cookies & Similar Technologies

We use cookies for site functionality and analytics. Only low-risk cookies are used without explicit consent, in compliance with the DUAA’s updated storage/access framework GOV.UK. Please see our Cookies Policy for more details and controls.

8. Data Subject Rights

You have the following rights under UK data protection law:

• Right to be informed, access,      rectification, erasure, restrict processing, data portability, object, and      rights related to ADM WIREDWikipedia
• Access requests (Subject Access Requests) are free, and we'll      respond within one month unless exceptions apply WIRED

9. Complaints

You may use our online complaints form or contact us to raise concerns. We will respond promptly and inform you of the outcome in writing, as required under the DUAA GOV.UK. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

10. Data Sharing and International Transfers

We share data only with trusted processors or partners who implement appropriate safeguards. International transfers (outside the UK) are handled via approved mechanisms (e.g., adequacy decisions, standard contractual clauses) in compliance with UK GDPR and DUAA provisions GOV.UKDLA Piper Data Protection.

11. Data Retention

We retain personal data only as long as necessary for legal, tax, or legitimate purposes. Retention periods are clearly defined in our retention schedule.

12. Data Security Measures

We implement appropriate technical and organisational measures to protect personal data, including:

• Encryption, access controls, pseudonymisation where appropriate
• Policies, data risk assessments, staff training, and backup      procedures
• Regular testing and monitoring of security effectiveness Information Commissioner's Office

13. Breach Notification

In case of personal data breach, we will adhere to legal requirements: notify the ICO within 72 hours if there's risk to individuals, and inform affected individuals when necessary WIRED.

14. Legal Framework

Our policy aligns with:

• UK GDPR
• Data Protection Act 2018 WikipediaDLA Piper Data Protection
• Data (Use and Access) Act 2025     provisions GOV.UK
• UK privacy/security best practices Information Commissioner's Office+1SecurityScorecard

15. Changes to this Policy

We may update this policy as laws or practices evolve. The latest version will be published with the effective date. Significant changes will be communicated via our website or email