Privacy Policy

Effective Date: 17 August 2025
Last Updated: 17 August 2025

Chaffey & Co (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information in accordance with the UK General Data Protection Regulation (“UK GDPR”).

What Information We Collect

When you submit a message via our contact form, we collect:

We do not collect any other personal data, use cookies, or track your activity on our website.

Legal Basis for Processing

Under the UK GDPR, we must have a lawful basis to process your personal data. We rely on the following:

How We Use Your Data

We use your personal data solely to:

We do not use your data for marketing purposes, nor do we share it with third parties unless required by law.

Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Data Retention

We retain your contact form submissions only for as long as necessary to respond to your enquiry or fulfil the purpose for which it was collected. After that, your data is securely deleted.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

RightDescription
AccessRequest a copy of the personal data we hold about you
RectificationRequest correction of inaccurate or incomplete data
ErasureRequest deletion of your personal data (“right to be forgotten”)
RestrictionRequest restriction of processing in certain circumstances
ObjectionObject to processing based on legitimate interests
Data PortabilityRequest transfer of your data to another organisation

To exercise any of these rights, please contact us using the details below.

Contact Details

If you have any questions about this Privacy Policy or how your data is handled, please contact enquiries@chaffeys.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection authority: https://ico.org.uk/