Purpose of this privacy policy

This privacy policy explains how Heights Digital collects and processes your personal data through your use of this website, including any data you may provide when you contact us or submit an enquiry.

Heights Digital Ltd is the controller and responsible for your personal data (referred to as "Heights", "Heights Digital", "we", "us" or "our" in this privacy policy).

Our details

Heights Digital Ltd Company number: 15921942 Registered office: 1 Mentmore Terrace, London, England, E8 3PN

If you have any questions about this privacy policy or would like to exercise any of your legal rights in respect of your personal data, please contact us at [email address].

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk).

The data we collect about you

Personal data means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use and store the following kinds of personal data about you:

• Identity Data including your first name and last name.
• Contact Data including your email address and company name.
• Enquiry Data including any information you provide when submitting a contact form on our website.
• Technical Data including your internet protocol (IP) address, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use to access this website.
• Usage Data including information about how you use our website.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). We do not collect any information about criminal convictions and offences.

How your data is collected

We collect data from and about you through the following methods:

• Direct interactions. You may provide us with your Identity, Contact and Enquiry Data when you submit a contact form or correspond with us by email.
• Automated technologies. As you interact with our website, we automatically collect Technical and Usage Data about your browsing actions and patterns. We collect this data using cookies and similar technologies (see Cookie Policy below).

How we use your personal data

We will only use your personal data when the law allows us to. We use your personal data in the following circumstances:

• To respond to your enquiries. When you submit our contact form, we use your Identity, Contact and Enquiry Data to respond to your message. Legal basis: legitimate interest (responding to prospective client enquiries).
• To analyse website usage. We use Technical and Usage Data, collected through Google Analytics, to understand how visitors interact with our site and to improve the user experience. Legal basis: consent (analytics cookies are only placed with your prior consent).

We do not use your personal data for marketing purposes unless you have explicitly opted in to receive communications from us.

Disclosures of your personal data

We may share your personal data with the following categories of third parties:

• Analytics providers. We use Google Analytics to collect anonymised data about website usage. Google may process this data on servers outside the UK. You can read Google's privacy policy at https://policies.google.com/privacy.
• Professional advisers including lawyers, auditors and insurers who provide consultancy, legal, insurance and accounting services.
• HM Revenue & Customs, regulators and other authorities who require reporting of processing activities in certain circumstances.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

International transfers

Google Analytics may involve the transfer of data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses approved for use in the UK, to give your personal data the same level of protection it has in the UK.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.

Data retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for.

Contact form submissions are retained for up to 24 months from the date of enquiry, unless an ongoing client relationship is established. Technical and Usage Data collected through Google Analytics is retained in accordance with Google's standard data retention settings.

Your legal rights

Under data protection law, you have the following rights in relation to your personal data:

• Access your personal data (commonly known as a "data subject access request").
• Correction of any incomplete or inaccurate data we hold about you.
• Erasure of your personal data where there is no good reason for us continuing to process it.
• Objection to processing of your personal data where we are relying on a legitimate interest.
• Restriction of processing of your personal data in certain circumstances.
• Transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.
• Withdrawal of consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of these rights, please contact us at [email address]. We will respond to all legitimate requests within one month.

You will not have to pay a fee to access your personal data or to exercise any of your other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.