1. Introduction 

We value your privacy and are committed to protecting your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store, and protect your personal information, as well as your rights regarding your data.  

​

2. Information We Collect

We collect and process the following types of Personally Identifiable Information (PII):
 

• Contact Information – Name, email address, phone number, and postal address (if provided).  

• Website Usage Data – IP address, browser type, operating system, referral sources, and interactions with our site (collected via cookies or analytics tools).  

• Communication Preferences – Information you provide when subscribing to our newsletter, requesting information, or contacting us.  

You are not required to provide personal information to browse our website. However, if you choose to contact us or request services, we may need certain details to respond to your request.  
 

3. How We Use Your Information

We process your personal data based on legitimate interests, contractual necessity, or your consent, depending on the circumstances. We use your information to:  

• Respond to inquiries and provide customer support.  

• Send updates, newsletters, or promotional materials (only if you have opted in).  

• Improve website functionality, security, and user experience.  

• Comply with legal obligations.  

We do not sell, rent, or share your personal information with third parties, except as required by law or as necessary for service delivery (e.g., web hosting providers). 

​

4. Legal Basis for Processing Data

Under the UK GDPR, we process your personal data based on the following lawful bases:  

• Consent – When you provide explicit permission (e.g., subscribing to a newsletter).  

• Contractual Necessity – When data is required to fulfill a contract (e.g., providing requested services).  

• Legitimate Interests – When processing is necessary for business operations, provided it does not override your rights.  

• Legal Obligation – When processing is required to comply with UK laws or regulations.

 

5. Data Security & Storage

 

We take appropriate technical and organizational security measures to protect your personal data. This includes:

 

• Secure storage with our web hosting provider.  

• Access restrictions – only authorized staff can access personal information.  

• Regular security monitoring to prevent unauthorized access, loss, or misuse.  

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. When data is no longer needed, we securely delete or anonymize it.  

​

6. Your Rights Under UK GDPR 

 

As a UK resident, you have the right to:  

• Access – Request a copy of your personal data.  

• Rectification – Correct any inaccurate or incomplete data.  

• Erasure (Right to be Forgotten) – Request deletion of your data, unless retention is required by law.  

• Restrict Processing – Request that we limit the way we use your data.  

• Data Portability – Receive your data in a structured format to transfer it elsewhere.  

• Object – Object to processing based on legitimate interests or direct marketing.  

• Withdraw Consent – Withdraw previously given consent for data processing.  

To exercise any of these rights, please contact us using the details below. We will respond within **one month**, as required by law.

​

7. External Links  

Our website may contain links to third-party websites. We have no control over the privacy practices of external sites, and we encourage you to review their privacy policies before providing any personal data.

 

8. Cookies & Tracking Technologies

We use cookies to enhance website functionality and analyze visitor interactions. You can manage cookie preferences through your browser settings. For more details, please refer to our Cookie Policy. 

​

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:  

email: info@phillippakirby.co.uk
write to: Birketts (LP), Kingfisher House,1 Gilders Way, Norwich, Norfolk NR3 1UB

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been misused. Visit www.ico.org.uk](https://www.ico.org.uk for more details.