Privacy Policy.

1. Introduction

This Privacy Policy explains how SRPNT Ltd ("SRPNT", "we", "us", "our") collects, uses, and shares personal data when you visit srpnt.co.uk, contact us, or otherwise interact with our services. We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

2. Who we are

SRPNT Ltd is a company registered in England and Wales. Our registered office is at Piccadilly Business Centre, Aldow Enterprise Park, Manchester, M12 6AE. We act as the data controller for the personal data described in this policy. If you have any questions, you can contact us at hello@srpnt.co.uk.

3. The personal data we collect

We may collect and process the following categories of personal data:

• Identity and contact data: name, email address, telephone number, company name. Provided directly by you, for example via our contact form.
• Enquiry content: the message text and any project details you choose to share.
• Technical data: IP address, browser type and version, device information, and pages visited. Collected automatically when you use our website.
• Cookie and usage data: see our Cookie Policy for details.

We do not knowingly collect special category data. Please do not include sensitive information (such as health, religious belief, or political opinion) in enquiries.

4. How we use your data and the lawful basis

We use your personal data for the following purposes, relying on the lawful bases set out below:

• To respond to enquiries submitted via our contact form or email. Lawful basis: legitimate interests (to communicate with prospective clients and partners) and, where relevant, the steps necessary to enter into a contract.
• To provide and improve the website. Lawful basis: legitimate interests (operating, securing, and improving our site).
• To send service-related communications in the course of an active engagement. Lawful basis: performance of a contract.
• To comply with legal obligations including accounting, tax, and regulatory requirements. Lawful basis: legal obligation.
• To set non-essential cookies only with your consent. See our Cookie Policy. Lawful basis: consent.

We do not use your data for automated decision-making or profiling that produces legal effects.

5. Who we share data with

We share personal data only with carefully selected third parties acting as our processors, and only to the extent necessary to provide our services:

• Hosting and infrastructure providers that operate our website and email systems.
• Form processing services (such as Formspree) that handle contact form submissions.
• Analytics providers (if enabled with your consent) to understand site usage.
• Professional advisers including accountants and legal counsel where required.
• Regulators and law enforcement where we are legally required to do so.

We do not sell your personal data to third parties.

6. International transfers

Some of our service providers are based outside the United Kingdom. Where personal data is transferred internationally, we rely on appropriate safeguards including UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, depending on the destination.

7. How long we keep your data

We retain personal data only as long as necessary for the purposes for which it was collected:

• Enquiry data: up to 24 months after our last contact, unless an active engagement requires a longer period.
• Contractual records: for the duration of the engagement plus 6 years to meet UK statutory record-keeping requirements.
• Technical logs: typically 12 months.

8. Your rights under the UK GDPR

You have the following rights in relation to your personal data:

• Right of access: to obtain a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate or incomplete data.
• Right to erasure: to ask us to delete your data in certain circumstances.
• Right to restrict processing: in certain circumstances.
• Right to data portability: to receive your data in a portable format.
• Right to object: to processing based on legitimate interests.
• Right to withdraw consent at any time, where processing is based on consent.
• Right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, please contact us at hello@srpnt.co.uk. We will respond within one calendar month.

9. Cookies

We use only essential cookies by default. Non-essential cookies (such as analytics) are set only with your prior consent. Full details are in our Cookie Policy.

10. Security

We implement appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. These include access controls, encryption in transit, and vendor due diligence. However, no system is perfectly secure, and we cannot guarantee the absolute security of data transmitted over the internet.

11. Children

Our website and services are not directed at children under 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be notified via the website or email where appropriate.

13. Contact

If you have questions about this policy or how we handle your personal data, contact us at:

SRPNT Ltd
Piccadilly Business Centre, Aldow Enterprise Park
Manchester, M12 6AE, United Kingdom
Email: hello@srpnt.co.uk