Privacy Policy

This Privacy Policy explains how GridMinds Consulting Ltd (“GridMinds”, “we”, “us”) collects, uses and protects personal data when you visit this website or contact us. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

GridMinds Consulting Ltd is a company registered in [country of registration], company number [company registration number], with its registered office at [registered office address]. We are the data controller responsible for your personal data.

Data protection enquiries: [privacy@yourdomain.com]. If we are required to register with the UK Information Commissioner’s Office (ICO), our registration reference is [ICO registration number].

2. The data we collect

• Contact data you submit through our forms or by email — name, work email, telephone, company and the contents of your message.
• Technical data — IP address, browser type, device and general location, collected only where strictly necessary or with your consent.
• Usage data — pages viewed and interactions, collected via analytics only after you consent (see our Cookie Policy).

We do not knowingly collect special-category data or data from children.

3. How and why we use your data (legal bases)

• To respond to your enquiry and provide our services — legitimate interests and/or steps prior to entering a contract.
• To operate and secure the website — legitimate interests.
• For analytics and marketing — only with your consent, which you may withdraw at any time.
• To comply with legal and regulatory obligations — legal obligation.

4. Sharing your data

We do not sell your personal data. We share it only with trusted processors who help us run our business (for example, email delivery and hosting providers), under contracts that require them to protect it, and with authorities where required by law.

5. International transfers

Where data is transferred outside the UK, we rely on adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement (IDTA) or Standard Contractual Clauses.

6. Retention

We keep enquiry data only as long as necessary to deal with your request and for legitimate business or legal record-keeping, after which it is securely deleted.

7. Your rights

Under the UK GDPR you have the right to:

• access a copy of your personal data;
• request correction or erasure;
• restrict or object to processing;
• data portability;
• withdraw consent at any time; and
• lodge a complaint with the ICO (ico.org.uk).

To exercise any right, contact us at [privacy@yourdomain.com].

8. Security

We apply appropriate technical and organisational measures — including encryption in transit (HTTPS), strict content-security and transport headers, and access controls — to protect your data.

9. Cookies

We use only strictly-necessary cookies by default. Any analytics or marketing cookies are set only with your consent. See our Cookie Policy for details and to change your preferences.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the latest version.

11. Contact

Questions about this policy or your data: [privacy@yourdomain.com] or write to us at our registered office above.