Legal

Privacy notice

This notice explains what personal data Atom Digital collects, why we collect it, and what rights you have over it. It applies to this website and to enquiries made through it.

Last updated: [date]

Who we are

Atom Digital is a trading name of Atom Digital Group Limited, a company registered in Scotland under company number SC866714. Our registered office is [registered office address].

Atom Digital Group Limited is the data controller for the personal data described in this notice. You can contact us about privacy at [privacy contact email] or through our contact page.

The personal data we collect

When you submit an enquiry through this website, we collect the information you provide in the form:

• your name and work email address
• your company name, where you give it
• the topic you need help with, your description of the problem, any indicative budget and any preferred start date
• the fact that you agreed to us using these details to respond to your enquiry

If you go on to work with us, we will also hold the contact and business details needed to deliver and administer that work, including correspondence and billing information.

We also collect limited technical information when you visit the site, such as your IP address, device and browser type, and the pages you view. This is collected through cookies and similar technologies — see our cookie policy.

Why we use it, and our lawful basis

Under the UK GDPR we must have a lawful basis for using your personal data. Ours are:

• To respond to your enquiry and take steps towards a possible contract. Lawful basis: steps taken at your request prior to entering into a contract, and our legitimate interest in responding to business enquiries.
• To deliver, administer and invoice work we carry out for you. Lawful basis: performance of our contract with you, and compliance with our legal obligations.
• To keep the website secure, working and improving. Lawful basis: our legitimate interests in operating and improving the site.
• To place non-essential cookies, including analytics. Lawful basis: your consent, which you can withdraw at any time.

We do not sell your personal data, and we do not use it to make automated decisions that produce legal or similarly significant effects.

Who we share it with

We share personal data only where we need to. That includes service providers who process data on our behalf under contract — currently [list processors: hosting, email, analytics, CRM, invoicing] — and our professional advisers, or a regulator or law enforcement body where we are legally required to disclose it.

Where a provider processes personal data outside the UK, we rely on UK adequacy regulations or on the UK International Data Transfer Agreement or Addendum, together with any additional safeguards required.

How long we keep it

We keep enquiry data for [retention period, e.g. 24 months] from your last contact with us, unless it becomes client data. Client records are kept for [retention period] after the end of the engagement, and financial records for at least six years, as UK tax law requires. After that we delete or anonymise the data.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct data that is inaccurate or incomplete
• ask us to delete data, or to restrict how we use it
• object to us relying on legitimate interests
• ask us to transfer data to you or another provider, where it was provided by you and is processed by automated means
• withdraw consent at any time, where we rely on consent

To exercise any of these, contact us at [privacy contact email]. We will respond within one month. Exercising your rights is free, and it will not affect the service you receive.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to address your concern first.

Keeping your data secure

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, and we limit access to those who need it to do their job. No transmission over the internet can be guaranteed completely secure, so any transmission is at your own risk.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed. Where a change is significant we will make that clear on this page.