1. Introduction
York Code Limited ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
We are registered in England and Wales. For data protection purposes, we are the data controller and we are responsible for ensuring that we use your personal data in compliance with data protection law.
2. Information We Collect
We may collect the following types of information:
2.1 Information You Provide to Us
- Contact Information: Name, email address, phone number, and company details when you contact us or request our services
- Communication Data: Any information you provide when you correspond with us via contact forms, email, or other communication channels
- Service Information: Details about the services you request or projects you discuss with us
2.2 Information Automatically Collected
- Usage Data: Information about how you access and use our website, including your IP address, browser type, pages visited, and time spent on pages
- Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track activity on our website. See our Cookie Policy for more details
3. How We Use Your Information
We use your personal information for the following purposes:
- To respond to your enquiries and provide customer support
- To provide, maintain, and improve our services
- To communicate with you about our services, including service updates and promotional offers (with your consent)
- To process and fulfil service requests and contracts
- To comply with legal obligations and protect our legal rights
- To prevent fraud and enhance the security of our website
- To analyse website usage and improve user experience
4. Legal Basis for Processing (UK GDPR)
We process your personal data under the following legal bases:
- Consent: Where you have given us explicit consent to process your data for specific purposes
- Contract: Where processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract
- Legitimate Interests: Where processing is necessary for our legitimate business interests (such as improving our services) and does not override your rights
- Legal Obligation: Where we must process your data to comply with the law
5. How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
- Service Providers: With trusted third-party service providers who assist us in operating our website and providing services (e.g., hosting providers, email services)
- Legal Requirements: When required by law, court order, or legal process
- Business Transfers: In connection with a merger, sale, or acquisition of all or part of our business
- With Your Consent: With your explicit consent for specific purposes
All third-party service providers are required to protect your personal data and use it only for the purposes we specify.
6. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including:
- Contact and enquiry data: Up to 3 years from last contact
- Client project data: Duration of contract plus 6 years for legal purposes
- Marketing data: Until you withdraw consent or request deletion
- Website analytics: Typically 26 months
7. Your Data Protection Rights
Under UK data protection law, you have the following rights:
- Right of Access: You can request copies of your personal data
- Right to Rectification: You can request correction of inaccurate or incomplete data
- Right to Erasure: You can request deletion of your personal data in certain circumstances
- Right to Restriction: You can request restriction of processing in certain circumstances
- Right to Data Portability: You can request transfer of your data to another organisation or directly to you
- Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes
- Rights Related to Automated Decision Making: You have rights related to automated decision making and profiling
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.
8. Cookies
Our website uses cookies to enhance your browsing experience. Cookies are small text files placed on your device that help us analyse web traffic and improve our services. You can control cookies through your browser settings, though disabling cookies may affect website functionality.
9. Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using SSL/TLS
- Regular security assessments and updates
- Access controls and authentication procedures
- Staff training on data protection
However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
10. International Data Transfers
Your personal data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.
11. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
14. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:
- Email: enquiries@yorkcode.co.uk
- Address: York Code Limited, Pippin Barn, Main Street, Hessay, York, YO26 8JR