2Introduction

We protect your personal data in line with the requirements of the General Data Protection Regulation (GDPR). The GDPR requires data controllers such as ourselves to document our lawful basis for processing personal data. It also gives you rights over how your data is processed. This privacy policy documents the data we collect, why and how we process it, and how to exercise your rights.

2.1Data controller

The data controller responsible for this website is Serve Legal, who can be contacted at 1st floor Citibase Millbank Tower, 21-24 Millbank, SW1P 4QP.

This website contains links to third-party websites, which have their own data controllers and privacy policies. This privacy policy applies only to this website.

2.2Lawful basis for processing

For each method by which we collect personal data, this privacy policy documents our lawful basis for processing the data. Where we rely on your consent to process your data, we explain how you can withdraw your consent and delete your data.

2.3Individual rights

The GDPR gives you rights over how your personal data is processed. You can exercise your rights by contacting us. In some cases you can also exercise your rights through automated systems, as described at the relevant points in this privacy policy.

2.4Security

The GDPR requires us to implement appropriate technical measures to protect data. We verify the identity of any individual who requests access to data before granting access. We use Transport Layer Security (TLS, also known as SSL) to encrypt any data you supply to us through our website. Additional technical measures are described at the relevant points in this privacy policy.

2.5Disclosures

In addition to any sharing of data described elsewhere in this privacy policy, we may disclose data for legal reasons. If we suspect criminal activity we may disclose data relating to those involved or affected to the appropriate authorities. We may also be obliged to disclose data if we receive a request from an appropriate authority.

2.6Changes to this privacy policy

We may occasionally make changes to this privacy policy. Following any changes, the date at the top of this privacy policy will be updated. If any change allows for wider access to data, such changes will only apply to data collected after the date of the updated privacy policy.

3Cookies

Cookies are small pieces of text that are stored by your browser. Each cookie has a name and is associated with a particular site. When your browser sends a request to a site (for example, to download a page, image, or video), the computer that responds (known as a server) may tell your browser to set one or more cookies. When your browser makes further requests to the same site it sends the cookies back to the server. This allows the server to remember you as you browse the site, and provide features such as shopping baskets or password-protected areas. For more information on the cookies we use, see our cookie policy.

4Data collected by third parties on our behalf

4.1Correl8

Our site is hosted by Correl8 Limited (registered company number 0533 5659 in England and Wales). Correl8 logs all requests in order to determine the causes of reported faults and to detect and block suspicious traffic. The log records the time of the request, your IP address, the requested resource, the referring site (if specified by your browser), and your browser’s user agent string (which will usually include the name and version of your browser and operating system). Log files are deleted after ninety days.[ER1] 

 Lawful basis for processing: Compliance with a legal obligation
Why? To comply with the GDPR obligation to implement appropriate technical measures to protect data

4.2Facebook pixel

We use Facebook pixel to track visitor interaction with our site in order to measure the success of our advertising and target it more effectively. Facebook collects details of the adverts with which you interact, pages you view and the time you viewed them, the features of your browser, and your IP address. For more information on how Facebook handles the data it collects, see Facebook’s privacy policy.

To opt out of Facebook pixel tracking on our site, see the Facebook pixel section of our cookie policy. To opt out of Facebook pixel tracking on all sites, see Facebook’s Ad Preferences.

Lawful basis for processing: Pursuance of our legitimate interests
Why? To allow us to analyse the effectiveness of our advertising

4.3Google Ads

We use Google Ads to track visitor interaction with our site in order to measure the success of our advertising and target it more effectively. Google collects details of the adverts with which you interact, pages you view and the time you viewed them, the features of your browser, and your IP address. For more information on how Google handles the data it collects, see Google’s privacy policy.

To opt out of Google Ads tracking on our site, see the Google Ads section of our cookie policy. To opt out of Google Ads tracking on all sites, see Google’s Ad Settings.

Lawful basis for processing: Pursuance of our legitimate interests
Why? To allow us to analyse the effectiveness of our advertising

4.4Google Analytics

We use Google Analytics to track visitor interaction with our site in order to produce statistical reports. Google collects details of the pages you view and the time you viewed them, the features of your browser, and your IP address. For more information on how Google handles the data it collects, see Google’s privacy policy.

To opt out of Google Analytics tracking on our site, see the Google Analytics section of our cookie policy. To opt out of Google Analytics tracking on all sites, use the Google Analytics Opt-out Browser Add-on.

Lawful basis for processing: Pursuance of our legitimate interests
Why? To allow us to analyse how visitors interaction with our site in order to improve our site and our services

4.5Hotjar

We use Hotjar to track visitor interaction with our site in order to produce statistical reports. Hotjar collects details of the pages you view and the time you viewed them, how you interacted with those pages, the features of your browser, and your IP address. For more information on how Hotjar handles the data it collects, see Hotjar’s privacy policy.

To opt out of Hotjar tracking on our site, see the Hotjar section of our cookie policy.

Lawful basis for processing: Pursuance of our legitimate interests
Why? To allow us to analyse how visitors interaction with our site in order to improve our site and our services

5Other data collected by third parties

5.1Facebook page widget

When you view a page containing the Facebook page widget, your browser connects to Facebook. For more information on how Facebook handles the data it collects, see Facebook’s privacy policy.

5.2Twitter profile widget

When you view a page containing the Twitter profile widget, your browser connects to Twitter. For more information on how Twitter handles the data it collects, see Twitter’s privacy policy.

5.3YouTube video player

When you view a page containing the YouTube video player, your browser connects to YouTube. For more information on how Google (the operator of YouTube) handles the data it collects, see Google’s privacy policy.

5.4Instagram page widget

When you view a page containing the Instagram page widget, your browser connects to Instagram. For more information on how Instagram handles the data it collects, see Instagram’s privacy policy.

5.5Linkedin page widget

When you view a page containing the LinkedIn page widget, your browser connects to LinkedIn. For more information on how LinkedIn handles the data it collects, see LinkedIn’s privacy policy.