Effective date: [Insert date]
Parson Finch respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit this website or contact us by email. It applies to all processing carried out through this website, unless otherwise stated in a separate notice.
1. Who We Are
For the purposes of applicable data protection laws, including the General Data Protection Regulation (“GDPR”), Parson Finch acts as the data controller in respect of personal data processed through this website.
2. Information We Collect
This website is designed as an informational and contact point for visitors. It does not include forms or user account functionality. As a result, the personal data we process is limited and typically falls into the following categories:
- Information you choose to provide: if you contact us by email, we may receive your name, email address, organisation, role, and any other information included in your message or signature.
- Technical data: when you browse the website, certain information may be collected automatically by our hosting infrastructure or security systems, such as IP address, browser type, device information, operating system, referring page, date and time of access, and server log data.
- Cookie and usage data: where relevant, we may use cookies or similar technologies that are necessary for the operation, security, and performance of the website. Any non-essential cookies, if used, will be managed in accordance with applicable law.
3. How We Use Your Data
We use personal data only where necessary and for legitimate business purposes, including to:
- respond to enquiries received by email;
- maintain, secure, and improve the website;
- monitor technical performance and diagnose issues;
- comply with legal and regulatory obligations;
- establish, exercise, or defend legal claims where necessary.
4. Legal Basis for Processing
Where the GDPR applies, we rely on one or more of the following legal bases to process personal data:
- Legitimate interests, including website administration, communication management, security, and operational improvement;
- Pre-contractual steps or contract-related processing, where you contact us in relation to a potential engagement or business relationship;
- Compliance with legal obligations, where processing is required by applicable law;
- Consent, where required for non-essential cookies or other optional technologies.
5. Email Communication
If you contact us using the email links provided on this website, the information you send will be processed for the purpose of reviewing and responding to your enquiry, and, where appropriate, for maintaining a record of our correspondence.
We ask that you avoid sending sensitive personal data unless strictly necessary. Any information shared by email is provided voluntarily and at your discretion.
6. Cookies and Similar Technologies
This website may use cookies or similar technologies that are strictly necessary for its operation, security, and basic functionality. If any non-essential cookies are used, including analytics or third-party tracking tools, they will only be activated in accordance with applicable legal requirements and, where necessary, after obtaining your consent.
You may configure your browser to refuse or delete cookies. Please note that disabling certain cookies may affect website functionality.
7. Disclosure of Personal Data
We do not sell or rent personal data.
We may share personal data only where necessary and appropriate with:
- trusted service providers that support website hosting, maintenance, security, or technical operations;
- legal, regulatory, or governmental authorities where disclosure is required by law;
- external professional advisers, auditors, or consultants, subject to confidentiality obligations.
Where third parties process personal data on our behalf, they are required to do so under appropriate contractual and legal safeguards.
8. International Transfers
Where personal data is transferred outside the European Economic Area (“EEA”), we will take appropriate steps to ensure that the transfer is carried out in compliance with applicable data protection law and that an adequate level of protection is maintained.
9. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, or for as long as required by applicable law.
Retention periods are determined by reference to the nature of the data, the purpose of processing, operational needs, legal requirements, and applicable limitation periods.
10. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
While we take reasonable steps to safeguard personal data, no system of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Your Rights
Subject to applicable law, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- request data portability, where applicable;
- withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with the competent supervisory authority if you believe your data protection rights have been infringed.
12. Third-Party Links
This website may contain links to third-party websites or email addresses. We are not responsible for the privacy practices, content, or security of third-party sites and encourage you to review their privacy policies separately.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The revised version will be posted on this page together with an updated effective date.
14. Contact
If you have any questions about this Privacy Policy or about how we process personal data, please contact us using the email address published on this website.