This policy describes the information practices used by the pages and features on this website.
UK General Data Protection Regulation
The UK General Data Protection Regulation, usually called the UK GDPR, and the Data Protection Act 2018, as amended, provide the main framework for protecting personal information in the United Kingdom. Personal information means information relating to an identified or identifiable person. A connection address or other technical identifier can be personal information where it can be linked to an individual.
The organisation deciding why and how personal information is used is its data controller. A service provider may process information on a controller’s behalf or act as a controller for its own purposes. These responsibilities depend on the actual processing arrangements, including those used for website hosting and the external map.
Lawful processing and data protection principles
Processing personal information requires an appropriate lawful basis under the UK GDPR. Depending on the purpose and circumstances, this may include consent, a legal obligation or legitimate interests. Legitimate interests require consideration of necessity and the effect on the individual. Visiting a website does not, by itself, give consent to every use of personal information.
Personal information must be handled lawfully, fairly and transparently, used for specified purposes, limited to what is necessary, kept accurate where required, retained only as long as needed and protected with appropriate security. The controller is responsible for being able to demonstrate how these principles are met.
Information submitted through this site
This website does not provide a contact form, account, newsletter subscription or other submission field. It does not ask visitors to enter personal details on its pages.
Website hosting and technical information
When a website is visited, the hosting and network services used to deliver it may process technical information such as a device connection address, request details and browser information.
Cookies and similar technologies
The website code does not set analytics or advertising cookies, use a visitor analytics service, or store visitor information in browser storage. Hosting and network services may have their own technical delivery practices.
The map and external links
The Service Areas page includes an OpenStreetMap map. When that map loads, your browser contacts OpenStreetMap services to request map content. Those services can receive the network address and technical request information associated with the connection. Their handling of this information is described in the OpenStreetMap Foundation Privacy Policy.
Links to other websites do not send an enquiry through this website. If you follow an external link, the destination website handles your visit under its own information practices. Images and fonts used by this website are served from this site.
Purposes and recipients
Technical request information is used by hosting and infrastructure services to deliver website content and support the operation of those services. The embedded map involves OpenStreetMap as an additional recipient of map requests. This website does not create an enquiry record, send lead information to a business recipient, or store personal details entered by visitors.
Storage and your choices
The website interface has no visitor account or personal data entry feature. Technical information associated with hosting and map requests is handled by the relevant providers. You may browse the service information without using the external map or following external links. Any privacy request concerning the website should be directed to the website operator through an independently verified contact method.
Retention, security and international transfers
The UK GDPR requires personal information to be kept no longer than necessary for its purpose, taking account of any legal retention requirements. Technical logs associated with hosting and map requests are subject to the relevant provider’s arrangements. The website interface does not maintain a separate visitor account or enquiry database.
Appropriate technical and organisational measures are required to protect personal information against unauthorised use, accidental loss or damage. Where personal information is transferred outside the United Kingdom, the applicable UK GDPR transfer requirements must be met, for example through an adequacy arrangement or appropriate safeguards where required. The external provider’s privacy information explains its own processing and any relevant transfers.
Your privacy rights under the UK GDPR
Depending on the information, lawful basis and circumstances, you may have the right to be informed about processing, access your personal information, correct inaccuracies, request erasure, restrict processing or receive certain information in a portable format. These rights are subject to the conditions and exceptions set out in data protection law.
Where processing relies on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn. The website code does not profile visitors or make automated decisions with legal or similarly significant effects.
Your right to object
Where personal information is processed on the basis of legitimate interests, you can object for reasons relating to your particular situation. The controller must consider the objection and stop that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims. You have an absolute right to object to processing for direct marketing.
Requests and complaints
Direct a request about personal information handled by the website operator to the operator through an independently verified contact method. Requests about processing carried out by an external provider for its own purposes can be made through that provider’s published privacy channels. A proportionate identity check or clarification may be needed to handle a request securely.
UK GDPR rights requests are generally handled without charge and without undue delay, usually within one calendar month. Extensions or adjustments to the response period and exceptions to the usual charging rules may apply where the law permits them. The Information Commissioner’s Office guidance on access requests explains how to ask for copies of personal information.
You can raise a data protection concern with the Information Commissioner’s Office, the UK data protection regulator. Your right to complain does not depend on using a form on this website.