Privacy Policy

We only process personal data to the extent necessary to provide a functioning website, deliver our services, and fulfil our contractual obligations. The regular processing of personal data takes place only with the consent of the data subject, or where another lawful basis applies under the UK GDPR.

We rely on the following legal bases under Article 6(1) of the UK GDPR:

• Consent (Art. 6(1)(a)) — where you have given clear, informed consent for a specific purpose.
• Contractual necessity (Art. 6(1)(b)) — where processing is necessary for the performance of a contract or pre-contractual steps.
• Legal obligation (Art. 6(1)(c)) — where processing is necessary to comply with a legal obligation under UK law.
• Vital interests (Art. 6(1)(d)) — where processing is necessary to protect the vital interests of a natural person.
• Legitimate interests (Art. 6(1)(f)) — where processing is necessary for our legitimate interests, provided your fundamental rights and freedoms do not override those interests.

Personal data is erased or restricted as soon as the purpose of its storage has been fulfilled. Additional storage may occur where required by UK law, regulations, or other legal obligations to which we are subject. Data is also erased when the applicable retention period expires, unless continued storage is necessary for the conclusion or performance of a contract.

You may request confirmation of whether we process your personal data. If so, you can request details including: the purposes of processing, the categories of data, the recipients, the planned retention period, the existence of automated decision-making, and the source of data not collected directly from you.

You also have the right to request information about appropriate safeguards under Article 46 UK GDPR where personal data is transferred to a third country.

You have the right to request correction of inaccurate personal data and completion of incomplete personal data without undue delay.

You may request that we restrict the processing of your personal data in the following circumstances:

• You contest the accuracy of your personal data, for a period enabling us to verify its accuracy.
• The processing is unlawful and you oppose erasure, requesting restriction of use instead.
• We no longer need the data for processing, but you require it for the establishment, exercise, or defence of legal claims.
• You have objected to processing under Article 21(1) UK GDPR and it has not yet been determined whether our legitimate grounds override yours.

Where processing has been restricted, we will inform you before the restriction is lifted.

You may request that we delete your personal data without undue delay where:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw consent and there is no other legal basis for processing.
• You object to processing under Article 21 UK GDPR and there are no overriding legitimate grounds.
• The data has been unlawfully processed.
• Erasure is required to comply with a legal obligation under UK law.
• The data was collected in relation to the offer of information society services to a child.

The right to erasure does not apply where processing is necessary for exercising the right of freedom of expression, compliance with a legal obligation, reasons of public interest in public health, archiving purposes in the public interest, or the establishment, exercise, or defence of legal claims.

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that we transmit your data directly to another controller where technically feasible, provided the processing is based on consent or contractual necessity and is carried out by automated means.

You have the right to object at any time to the processing of your personal data based on Article 6(1)(e) or 6(1)(f) UK GDPR, including profiling. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Where personal data is processed for direct marketing purposes, you have the right to object at any time, and we will cease processing for such purposes immediately.

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless the decision is necessary for entering into or performing a contract, is authorised by UK law, or is based on your explicit consent.

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe that the processing of your personal data infringes the UK GDPR.

Each time our website is accessed, our systems automatically collect data from the accessing device. The following data is collected:

• Browser type and version
• Operating system
• Internet service provider
• IP address of the accessing device
• Date and time of access
• Referring website (URL from which the user arrived)
• Pages accessed on our website

This data is stored in server log files and is not combined with other personal data.

Temporary storage of the IP address is necessary to deliver the website to your device. Log file storage ensures website functionality, optimisation, and the security of our IT systems. No analysis of this data for marketing purposes takes place. The legal basis is Article 6(1)(f) UK GDPR (legitimate interests).

Data is deleted once the session ends. Log files are deleted after seven days at the latest. Where longer storage is necessary, IP addresses are anonymised so that identification of the accessing device is no longer possible.

Our website uses cookies — small text files stored on your device by your browser. Some cookies are strictly necessary for the website to function, while others help us improve your experience or enable analytics and marketing functionality.

The following types of data may be stored via cookies:

• Language and display preferences
• Authentication and session information
• Search queries
• Page view frequency and usage patterns

Data collected via cookies is pseudonymised where technically possible and is not combined with other personal data without your consent.

Strictly necessary cookies are required for the website to function and are processed under Article 6(1)(f) UK GDPR (legitimate interests). Analytics and marketing cookies are only set with your explicit consent under Article 6(1)(a) UK GDPR, in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) as amended.

You can manage, restrict, or delete cookies at any time through your browser settings. You may also withdraw consent for non-essential cookies via our cookie consent tool. Please note that disabling certain cookies may affect website functionality.

You can subscribe to our newsletter on our website. When subscribing, the following data is collected:

• Email address
• First name and last name
• Telephone or mobile number (optional)
• IP address of the subscribing device
• Date and time of registration

No data is shared with third parties in connection with newsletter distribution. Data is used exclusively for sending the newsletter and related communications.

Your email address is collected to deliver the newsletter. Additional data collected during registration helps prevent misuse of our services. The legal basis is Article 6(1)(a) UK GDPR (consent).

Your email address is stored as long as your newsletter subscription is active. Other registration data is generally deleted after seven days. You can unsubscribe at any time using the opt-out link in every newsletter, which also constitutes withdrawal of consent.

Where consent has been given, the legal basis is Article 6(1)(a) UK GDPR. For data transmitted via email, Article 6(1)(f) UK GDPR (legitimate interests) applies. Where the email contact aims to conclude a contract, Article 6(1)(b) UK GDPR additionally applies.

Data is deleted once the conversation has ended and the matter has been conclusively resolved. Additional data collected during transmission is deleted after seven days at the latest.

You may withdraw consent and object to the storage of your personal data at any time by contacting us. In such cases, all personal data stored in connection with the contact will be deleted.

Our website provides contact forms for electronic enquiries. When you submit a form, the following data is collected:

• Email address
• First name and last name
• Company name (where provided)
• Telephone or mobile number
• IP address of the submitting device
• Date and time of submission

Your consent is obtained during the submission process, and reference is made to this privacy policy. Data is used exclusively for processing your enquiry.

Processing serves exclusively to handle your contact request. The legal basis is Article 6(1)(a) UK GDPR (consent). Where the contact aims to conclude a contract, Article 6(1)(b) UK GDPR additionally applies.

Data is deleted once the enquiry has been conclusively resolved. Additional technical data is deleted after seven days. You may withdraw consent and request deletion at any time.

We provide forms and accept email applications for job vacancies. The following data may be collected:

• Title, first name, and last name
• Postal address
• Telephone or mobile number
• Email address
• Salary expectations
• Education, training, and language skills
• Curriculum vitae, certificates, and professional photograph

Your data is not shared with third parties and is used exclusively for processing your application. You will receive an acknowledgement of receipt by email.

The legal basis is Article 6(1)(b) UK GDPR — processing is necessary for steps taken at your request prior to entering into a potential employment contract.

After completion of the recruitment process, application data is stored for up to six months and then deleted, unless a longer retention period is required by law. Where you consent to your data being retained for future vacancies, we will store it in accordance with your consent.

You may object to the processing of your personal data at any time. In such cases, your application will no longer be considered and all associated data will be deleted.

Where we offer user registration, the following data may be collected:

• Email address
• First name and last name
• Postal address
• Telephone or mobile number
• IP address of the registering device
• Date and time of registration

Your consent is obtained during the registration process. Data is not shared with third parties.

Registration is necessary for the fulfilment of a contract or for pre-contractual measures. The legal basis is Article 6(1)(a) UK GDPR (consent) and/or Article 6(1)(b) UK GDPR (contractual necessity).

Data is deleted when it is no longer necessary for the purpose of its collection. Even after contract completion, it may be necessary to retain certain data to comply with legal obligations.

You may cancel your registration and request modification or deletion of your stored data at any time, unless retention is required for contractual or legal reasons.

We use advertising services provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. These services place cookies on your device to track conversions, display relevant advertisements, and measure campaign performance. Personal data collected may include: pages visited, elements clicked, device and browser information, IP address, and pseudonymised user IDs.

The legal basis is Article 6(1)(a) UK GDPR (consent). Data is stored for a maximum of 18 months. You can manage your Google advertising preferences at adssettings.google.com. For further information, see Google's privacy policy.

We use Microsoft Advertising conversion tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Bing Ads stores cookies on your device to track user actions following clicks on Bing advertisements. We only receive aggregate, anonymised conversion data.

The legal basis is Article 6(1)(a) UK GDPR (consent). You can manage your Microsoft advertising preferences at Microsoft privacy settings. For further information, see Microsoft's privacy statement.

We use tracking technologies provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. The Meta Pixel allows us to track user actions after viewing or clicking on a Meta advertisement. Data collected may include pages visited, interactions, device information, and pseudonymised user IDs.

The legal basis is Article 6(1)(a) UK GDPR (consent). For further information, see Meta's privacy policy.

We may use the LinkedIn Insight Tag provided by LinkedIn Ireland Unlimited Company. This enables conversion tracking and retargeting for LinkedIn advertising campaigns. The legal basis is Article 6(1)(a) UK GDPR (consent). For further information, see LinkedIn's privacy policy.

We may use the TikTok Pixel provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, Ireland. This enables conversion tracking and audience building for TikTok advertising campaigns. The legal basis is Article 6(1)(a) UK GDPR (consent). For further information, see TikTok's privacy policy.

We use Calendly LLC for online appointment scheduling. When you book a consultation through our website, Calendly collects your name, email address, and any additional information you provide. The legal basis is Article 6(1)(a) UK GDPR (consent) and Article 6(1)(b) UK GDPR (pre-contractual steps). For further information, see Calendly's privacy policy.

For all consent-based third-party services, you have the right to revoke your consent at any time. You can prevent the collection and processing of your data by:

• Declining non-essential cookies via our cookie consent tool.
• Adjusting your browser settings to block third-party cookies.
• Using browser extensions such as NoScript or Ghostery.
• Using the 'Do Not Track' feature in supporting browsers.
• Managing your preferences directly with each third-party provider using the links above.

Revocation of consent does not affect the lawfulness of processing carried out prior to the revocation.