Privacy Policy

Our Commitment to Your Privacy

At Thistledown, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and handle your personal information when you interact with our website and services.

We are committed to maintaining the trust and confidence of our visitors and clients. We want you to understand what information we collect, why we collect it, and how we use it. This policy applies to all information collected through our website and any related services.

Information We Collect

Information You Provide to Us

We collect information that you voluntarily provide when you use our services or contact us. This may include:

• Contact details such as name, email address, and phone number when you fill out forms on our website
• Project information and requirements when you inquire about our services
• Communication content when you correspond with us via email or contact forms
• Feedback, survey responses, or testimonials you choose to provide

Information Collected Automatically

When you visit our website, certain information is automatically collected through cookies and similar technologies:

• Device information including browser type, operating system, and device identifiers
• Usage data such as pages viewed, time spent on pages, and navigation paths
• IP address and general location information for security and analytics purposes
• Referring website addresses and search terms used to find our site

Legal Basis for Processing

We process your personal data based on your consent when you submit forms, our legitimate business interests in providing and improving our services, and as necessary to fulfill our contractual obligations to clients. We ensure that any data processing is proportionate and respects your privacy rights.

How We Use Your Information

Service Provision and Communication

We use your information to provide our services and communicate with you effectively:

• Responding to your inquiries and providing customer support
• Processing and fulfilling service requests
• Sending updates about projects you're involved with
• Providing technical support and assistance

Website Improvement and Analytics

We analyze usage data to enhance your experience and improve our services:

• Understanding how visitors interact with our website
• Identifying and fixing technical issues
• Optimizing website performance and user experience
• Developing new features based on user behavior patterns

Marketing and Business Development

With your consent, we may use your information for marketing purposes:

• Sending newsletters about our services and industry insights
• Informing you about new offerings that may interest you
• Conducting market research to better serve our clients
• You can opt out of marketing communications at any time

Data Sharing with Third Parties

We do not sell your personal information. We may share data with trusted service providers who assist us in operating our website and delivering services, such as hosting providers, email service providers, and analytics tools. These partners are contractually obligated to protect your data and use it only for specified purposes. We may also disclose information when required by law or to protect our rights.

Data Protection and Security

Security Measures

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit using secure protocols
• Secure storage systems with access controls and monitoring
• Regular security assessments and updates to our systems
• Limited access to personal data on a need-to-know basis

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Contact information is typically retained for three years after our last interaction with you. Project-related data may be kept longer if required for legal or contractual obligations. You can request deletion of your data at any time, subject to our legal obligations.

Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours as required by applicable data protection laws. We have procedures in place to detect, report, and investigate security incidents promptly.

Your Rights and How to Exercise Them

Access and Portability

You have the right to access your personal data and receive it in a portable format:

• Request a copy of the personal information we hold about you
• Receive your data in a structured, commonly used format
• Transfer your data to another service provider where technically feasible

Rectification and Erasure

You can correct inaccurate information or request deletion of your data:

• Update or correct any inaccurate personal information
• Request deletion of your personal data when it's no longer needed
• Withdraw consent for processing at any time

Objection and Restriction

You have rights to control how we process your data:

• Object to processing based on legitimate interests
• Request restriction of processing in certain circumstances
• Opt out of direct marketing communications

How to Contact Us

To exercise any of these rights, please contact us using the details provided at the top of this page. We will respond to your request within one month and may request verification of your identity to protect your information.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

• Avoid filling out contact forms, account registrations, or any data-submitting features
• Disable cookies through your browser settings (see our Cookie Policy for more details)
• Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided at the top of this page. We will process your request promptly and confirm once your data has been removed from our systems.

International Data Transfers

Our services are primarily provided within the United Kingdom and European Economic Area. However, some of our service providers may be located in other countries. When we transfer data internationally, we ensure appropriate safeguards are in place through:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions recognizing equivalent data protection standards
• Additional technical and organizational measures as necessary

Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will post any changes on this page and update the "Last updated" date. For significant changes, we may provide more prominent notice or seek your consent as required by law. We encourage you to review this policy regularly to stay informed about how we protect your information.

Complaints and Supervisory Authority

If you have concerns about how we handle your personal data, please contact us first so we can address your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters, or with the supervisory authority in your country of residence.

Contact Information