Privacy Policy
How we collect, use, and protect your personal information.
Last updated: January 2024
1. Introduction
mellow-star ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage with our environmental consulting services.
We encourage you to read this policy carefully to understand our practices regarding your personal data. By using our website, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
2.1 Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Complete enquiry forms on our website
- Request information about our services
- Subscribe to our communications
- Engage us for consulting services
This information may include your name, email address, organisation name, and any other details you choose to provide.
2.2 Automatically Collected Information
When you visit our website, we may automatically collect certain information about your device and browsing activity, including:
- IP address
- Browser type and version
- Pages visited and time spent
- Referring website
- Device type and operating system
3. How We Use Your Information
We use the information we collect to:
- Respond to your enquiries and provide requested services
- Communicate with you about our services
- Improve our website and user experience
- Analyse website usage patterns
- Comply with legal obligations
- Protect against fraudulent or unauthorised activity
4. Legal Basis for Processing
Under UK data protection law, we must have a legal basis for processing your personal data. Our legal bases include:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary for the performance of a contract with you
- Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
- Legal obligation: Where processing is necessary to comply with the law
5. Data Sharing and Disclosure
We do not sell your personal information to third parties. We may share your information with:
- Service providers who assist with our operations (hosting, analytics)
- Professional advisers (legal, accounting) where necessary
- Regulatory authorities when required by law
Any third parties with whom we share data are contractually bound to protect your information and use it only for specified purposes.
6. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typical retention periods:
- Enquiry data: 2 years from last contact
- Client project data: 7 years from project completion
- Financial records: As required by law
7. Your Rights
Under UK data protection law, you have the following rights:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate personal data
- Erasure: Request deletion of your personal data in certain circumstances
- Restriction: Request limitation of processing of your personal data
- Portability: Request transfer of your data to another organisation
- Objection: Object to certain types of processing
To exercise any of these rights, please contact us using the details provided below.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
9. International Transfers
We primarily store and process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.
10. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will take steps to delete that information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
mellow-star
47 Greenford Lane
London, E14 8NQ
United Kingdom
Email: [email protected]
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.