Privacy Policy

Introduction

Lively Gearbox Technology Solutions Ltd ("we", "us", or "our") is committed to protecting your privacy. This policy explains how we collect and process personal data when you visit our website or engage with our services.

We are registered with the Information Commissioner's Office (ICO) under registration number ZB123456. Our registered office is at 14 Whitworth Street, Manchester, M1 3BS, United Kingdom.

Information We Collect

We may collect different types of personal information depending on how you interact with us:

Information you provide directly

When you contact us via email or through our website, we collect the information you choose to share, which typically includes your name, email address, organisation name, and details about your enquiry or project requirements.

Information collected automatically

When you visit our website, we automatically collect certain technical information through cookies and similar technologies. This may include your IP address, browser type, device information, pages visited, and time spent on our site. For more details about cookies, please see our Cookies Policy.

Information from third parties

Occasionally we may receive information about you from third parties, such as when you're referred to us by a partner organisation or when your employer engages our services on your behalf.

How We Use Your Information

We use personal information for the following purposes:

• Responding to your enquiries and providing information about our services
• Delivering services you or your organisation have engaged us to provide
• Managing our business relationship with you or your organisation
• Improving our website and services based on usage patterns
• Complying with legal and regulatory obligations
• Protecting our legitimate business interests and legal rights

We do not sell personal information to third parties, nor do we use it for automated decision-making or profiling that would significantly affect you.

Legal Basis for Processing

Under UK data protection law, we must have a valid legal basis for processing your personal data. Depending on the circumstances, we rely on the following:

• Contractual necessity: Processing required to fulfil a contract with you or to take steps at your request before entering a contract
• Legitimate interests: Processing necessary for our legitimate business interests, provided these do not override your rights and freedoms
• Legal obligation: Processing required to comply with applicable laws and regulations
• Consent: Where we've asked for and obtained your explicit consent for specific processing activities

Data Sharing

We may share your personal information with:

• Service providers: Companies that help us deliver our services, such as cloud hosting providers, email service providers, and IT support contractors
• Professional advisors: Lawyers, accountants, and auditors who provide professional services to us
• Regulatory authorities: Government agencies, law enforcement, or other bodies when required by law

All third parties we work with are required to handle your data securely and in accordance with applicable data protection laws. We have appropriate contracts in place to ensure your information is protected.

International Transfers

We primarily store and process data within the United Kingdom and European Economic Area. Where we transfer data outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected. Our standard retention periods are:

• Enquiry data: 2 years from last contact if no engagement follows
• Client project data: 7 years from project completion, in line with professional liability requirements
• Financial records: 7 years as required by tax and company law
• Website analytics: 26 months

Your Rights

Under UK data protection law, you have the following rights regarding your personal information:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your data in certain circumstances
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within one month as required by law.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection.

We are ISO 27001 certified and Cyber Essentials Plus accredited, demonstrating our commitment to information security best practices.

Children's Privacy

Our services are directed at businesses and professional users. We do not knowingly collect personal information from individuals under 18 years of age. If you believe we have inadvertently collected such information, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. Significant changes will be communicated via email to existing clients and prominently displayed on our website. We encourage you to review this policy periodically.

Contact and Complaints

If you have questions about this policy or wish to exercise your data protection rights, please contact:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office at lively-gearbox.com or by calling 0303 123 1113.