Privacy Policy

Introduction

Shine Spiral Ltd ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website or engage with our services.

We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We may collect and process the following categories of personal data:

Information You Provide

• Name and contact details (email address, company name)
• Enquiry details and correspondence content
• Service preferences and project information

Information Collected Automatically

• IP address and browser type
• Pages visited and time spent on our website
• Referring website addresses
• Device information and operating system

How We Use Your Information

We use your personal data for the following purposes:

• To respond to your enquiries and provide requested services
• To send relevant communications about our services (with your consent)
• To improve our website and user experience
• To comply with legal obligations
• To protect our legitimate business interests

Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent: Where you have given explicit consent for specific purposes
• Contract: Where processing is necessary to fulfil a contract with you
• Legitimate interests: Where we have a legitimate business interest that does not override your rights
• Legal obligation: Where we must comply with a legal requirement

Data Sharing

We do not sell your personal data to third parties. We may share your information with:

• Service providers who assist our operations (under strict confidentiality agreements)
• Professional advisers including lawyers and accountants
• Regulatory authorities where required by law

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is typically retained for 3 years unless you request earlier deletion. Client project data may be retained for 7 years for legal and regulatory compliance.

Your Rights

Under data protection law, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

To exercise any of these rights, please contact us using the details provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission, secure server infrastructure, and restricted staff access.

International Transfers

Your data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with data protection legislation.

Changes to This Policy

We may update this privacy policy periodically. Any significant changes will be communicated through our website. We encourage you to review this policy regularly.

Contact Us

For any questions regarding this privacy policy or to exercise your data protection rights, please contact:

Shine Spiral Ltd
47 Greenway Business Centre
Bristol BS2 0QD
Email: [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.