Privacy Policy (GDPR Compliance)
Last Updated: [Date]
Your Space ("we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use our website [website URL] ("the Website") and our services.
This Privacy Policy is in compliance with the UK GDPR (General Data Protection Regulation) and the Data Protection Act 2018. Please read the following carefully to understand how we use your personal data.
1. Information We Collect
We collect the following types of personal data:
-
Contact Information: Name, email address, phone number, postal address.
-
Account Information: Username, password, billing information (if applicable).
-
Technical Data: IP address, browser type, device type, location data, and other information about your device or browsing activity (via cookies).
-
Usage Data: Information about how you use our website, including pages visited, time spent on the site, and interactions with the services.
-
Other Data: Any other information you voluntarily provide us (e.g., feedback, surveys).
2. How We Use Your Information
We use the personal data we collect for the following purposes:
-
To provide services: To deliver the services you requested, process transactions, and communicate with you about those services.
-
To improve our services: To analyse user behaviour, improve the user experience, and enhance our website’s functionality.
-
Marketing: To send promotional emails or newsletters (with your consent).
-
Legal Compliance: To comply with legal obligations (e.g., tax, legal claims, and fraud prevention).
-
To communicate with you: Responding to your inquiries, providing customer support, and notifying you of any changes to our services or policies.
3. Legal Basis for Processing Your Data
We rely on the following legal bases for processing your personal data:
-
Consent: Where we have your explicit consent (e.g., for marketing communications).
-
Contractual Necessity: Where processing is necessary to perform a contract with you (e.g., providing our services).
-
Legal Obligation: To comply with legal obligations (e.g., tax laws).
-
Legitimate Interests: Where it is in our legitimate interests to process your data (e.g., improving our website).
4. How We Store Your Information
We implement appropriate technical and organisational measures to protect your personal data. Your data will be stored securely on our servers or with trusted third-party providers. We retain your data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
5. Sharing Your Information
We do not sell your personal data to third parties. However, we may share your data with trusted third parties for the following reasons:
-
Service Providers: We may share your data with companies that provide services on our behalf (e.g., payment processors, email providers, and web hosting).
-
Legal Requirements: We may disclose your personal data to comply with legal obligations, protect our rights, or in the event of a legal claim.
-
Business Transfers: In the case of a merger, acquisition, or sale of assets, your personal data may be transferred.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website. These may include:
-
Essential Cookies: Necessary for the operation of the website.
-
Analytical Cookies: To help us analyse website traffic and usage.
-
Marketing Cookies: Used to track user activity and serve relevant advertisements.
You can manage your cookie preferences through your browser settings or by using the cookie consent management tool on our website.
7. Your Rights
Under the UK GDPR, you have the following rights regarding your personal data:
-
Right to Access: You can request access to the personal data we hold about you.
-
Right to Rectification: You can request correction of inaccurate or incomplete data.
-
Right to Erasure: You can request the deletion of your personal data under certain circumstances.
-
Right to Restriction of Processing: You can request a restriction on the processing of your data.
-
Right to Data Portability: You can request to receive your data in a structured, commonly used format.
-
Right to Object: You can object to the processing of your personal data for specific purposes (e.g., direct marketing).
-
Right to Withdraw Consent: You can withdraw consent at any time, where consent is the legal basis for processing.
To exercise any of these rights, please contact us at [email address].
8. International Data Transfers
If we transfer your personal data outside of the UK or EEA (European Economic Area), we ensure that appropriate safeguards are in place to protect your data in compliance with data protection laws.
9. Children's Privacy
Our website and services are not intended for individuals under the age of 16, and we do not knowingly collect data from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete that information.
10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated Privacy Policy on our website with a new "Last Updated" date.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or the processing of your personal data, please contact us at:
Your Space
Leeds