Privacy Policy
Last updated: May 2025
Our commitment to your privacy
Grantbury takes data protection seriously. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it. We've written it to be read, not just filed away.
This policy applies to all visitors of this website and anyone who contacts us through it. It does not cover data processed under separate client agreements, which are governed by their own terms.
1. What data we collect
Legal basis: Contact form data is processed on the basis of legitimate interest (responding to your enquiry). Analytics and advertising data are processed on the basis of your consent, which you may withdraw at any time.
Retention: Contact form data is retained for as long as reasonably necessary to handle your enquiry and for up to 12 months thereafter. Analytics data follows the retention settings of the analytics provider.
2. How we use your data
- —To respond to enquiries submitted through the contact form.
- —To understand which parts of the site are most useful, so we can improve the experience over time.
- —To show relevant advertising to visitors who have consented to advertising cookies.
- —We do not use your data for automated decision-making or profiling in any meaningful sense.
- —We do not sell your personal data to third parties.
Third parties who may receive data:
- —Analytics providers (e.g. Google Analytics) — if analytics cookies are consented to.
- —Advertising networks — only if advertising cookies are consented to.
- —Email service providers — for handling contact form responses, under data processing agreements.
3. How we protect your data
- —This website is served over HTTPS, ensuring data in transit is encrypted.
- —Access to any stored contact data is restricted to authorised personnel only.
- —We review our data handling practices periodically and update them as needed.
- —In the event of a data breach that poses a risk to your rights, we will notify the relevant supervisory authority and, where required, affected individuals without undue delay.
4. Your rights
Depending on your location, you may have some or all of the following rights regarding your personal data:
- —Right of access: to receive a copy of personal data we hold about you.
- —Right to rectification: to have inaccurate data corrected.
- —Right to erasure: to request deletion of your data under certain circumstances.
- —Right to data portability: to receive your data in a commonly used format.
- —Right to object: to processing based on legitimate interests or for direct marketing.
- —Right to withdraw consent: at any time for processing based on consent (e.g. analytics cookies).
To exercise any of these rights, please use our contact form. We'll respond within 30 days.
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may: avoid filling out contact forms, account registrations, or any data-submitting features; disable cookies through your browser settings (see our Cookie Policy for more details); or contact us directly to request the deletion of any previously shared personal data. We respect your privacy choices. If you would like us to delete your data, please reach out to us via our Contact page. We will process your request promptly.
5. Changes to this policy
We may update this policy from time to time. When we do, we'll revise the "last updated" date at the top. Significant changes will be communicated more prominently where appropriate.