Privacy Policy

1. Information We Collect

We collect personal data you voluntarily provide when you contact us, including:

• Name, email address, and phone number
• Company name and job title
• Project details and requirements you share
• Information from contact forms and inquiries

We also automatically collect non-personal data through analytics tools, including IP address, browser type, pages visited, and time spent on site.

2. Legal Basis for Processing (GDPR)

Under UK GDPR, we process your data based on: (a) your explicit consent, (b) our legitimate interest in responding to inquiries and improving services, and (c) contract performance for client engagements.

3. How We Use Your Information

We use collected information to:

• Respond to your inquiries and support requests
• Provide, maintain, and improve our services
• Send transactional emails and service updates
• Understand user behaviour and optimize website performance
• Comply with legal and regulatory obligations

4. Data Sharing & Third Parties

We do not sell or trade your personal data. We may share information with trusted service providers (hosting, email, analytics) who process data on our behalf under strict confidentiality agreements. International transfers comply with UK GDPR adequacy requirements.

5. Cookies & Analytics

We use cookies for website functionality and analytics (Google Analytics 4). Marketing cookies require explicit consent. You can:

• Manage cookie preferences via our banner
• Control cookies in your browser settings
• Opt-out of analytics by disabling cookies

6. Data Retention

Contact form submissions are retained for 2 years unless longer retention is legally required. Cookies are retained per your preferences. You can request deletion anytime under GDPR Article 17 (Right to Erasure).

7. Your Rights (UK GDPR)

You have the right to:

• Access your personal data (Article 15)
• Correct inaccurate data (Article 16)
• Request erasure ("Right to be Forgotten")
• Restrict processing of your data
• Object to processing
• Data portability

Submit requests to hello@ironwolfetech.co.uk.

8. Data Security

We implement SSL encryption, secure server infrastructure, access controls, and regular security audits. However, no method of transmission is 100% secure. We comply with data protection best practices but cannot guarantee absolute security.

9. Lawful Basis & Children

Our website is not intended for individuals under 16. If we discover we've collected data from a minor, we will promptly delete it. Parents/guardians may request deletion under GDPR Article 8.

10. Data Breach Notification

In the event of a data breach affecting your rights, we will notify you and the ICO within 72 hours as required by UK GDPR Article 33.

11. Contact & DPA

For privacy concerns or DSAR (Data Subject Access Requests):
Email: hello@ironwolfetech.co.uk
UK Information Commissioner's Office: ico.org.uk