Privacy policy.

Information we collect

We may collect your name, organisation, job title, email address, telephone number and anything you choose to include when you contact us. If you become a client, we may also keep project correspondence, briefs, contracts, billing details and records of the work we deliver.

When you visit this website, our hosting provider may automatically process limited technical information such as your IP address, browser type, device information, pages visited and the date and time of your visit. This helps keep the website reliable and secure.

How we use your information

We use personal information to respond to enquiries; discuss, plan and deliver our services; manage proposals, contracts, invoices and payments; maintain business records; improve and protect our website and services; and comply with legal or regulatory obligations.

Our legal bases

Depending on the circumstances, we process personal information because it is necessary to take steps at your request before entering a contract, to perform a contract, to meet a legal obligation, or for our legitimate interests in running and developing our business. Where the law requires consent, you may withdraw it at any time.

Cookies and analytics

This website does not currently use advertising cookies or third-party analytics cookies. Essential technical processes may be used by our hosting provider to deliver and protect the site. If this changes, we will update this policy and provide any consent choices required by law.

Who we share information with

We may share information with trusted suppliers who help us provide our services, such as website hosting, email, IT, professional advisers, payment or accounting providers, and specialist project partners. They may use information only for the agreed purpose and must protect it appropriately. We may also disclose information where required by law or in connection with a business reorganisation.

International transfers

Some suppliers may process information outside the United Kingdom. Where they do, we use appropriate safeguards required by data protection law, such as an adequacy decision or approved contractual protections.

How long we keep information

We keep personal information only for as long as it is reasonably needed for the purpose collected, including to meet legal, accounting and tax requirements and to deal with possible disputes. The period varies according to the type of information and our relationship with you.

Your rights

Under UK data protection law, you may have rights to access, correct or erase your personal information; restrict or object to its use; receive a portable copy; and withdraw consent. These rights are not absolute and may depend on the circumstances.

To exercise a right or ask a privacy question, email intotrust@exposed.co.uk. We may need to confirm your identity before acting on a request.

Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.

Changes to this policy

We may update this policy to reflect changes to our services or legal obligations. The latest version will always appear on this page.