Privacy Policy

1. Information We Collect

We may collect and process the following categories of personal data:

• Identity data — name, company name, job title
• Contact data — email address, telephone number, postal address
• Enquiry and correspondence data — messages submitted via our contact form or email
• Portal data — project progress, document access, approval records, and activity within the client portal
• Referral data — information submitted by referral partners and referred clients
• Technical data — IP address, browser type, device information, and usage data collected via cookies and analytics

2. How We Collect Your Data

• Directly from you — when you complete our contact form, register as a referral partner, or use the client portal
• Automatically — when you browse our website, via cookies and similar tracking technologies
• From third parties — where a referral partner provides your details in connection with a potential project

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and provide our services
• To manage your client portal account and project delivery
• To process and track referrals and associated fees
• To send you relevant project updates, proposals, and documents
• To comply with our legal and contractual obligations
• To improve our website and services through analytics
• To send marketing communications where you have given consent or where we have a legitimate interest

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract — where processing is necessary to perform a contract with you or take steps prior to entering one
• Legitimate interests — where we have a genuine business reason that does not override your rights
• Legal obligation — where we are required to process data to comply with the law
• Consent — where you have given clear consent, such as for marketing communications

5. Data Sharing

We do not sell your personal data. We may share your data with trusted third parties who assist us in operating our business, including IT service providers, email delivery services, and professional advisers. All third parties are required to handle your data securely and in accordance with applicable data protection law.

We may also disclose your data where required by law, regulation, or legal proceedings.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Client and project data is typically retained for seven years following the conclusion of a project. Enquiry data from individuals who do not become clients is retained for up to two years.

7. Cookies

Our website uses cookies to improve your browsing experience and to analyse site traffic. You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of the site. We use analytics tools to understand how visitors use our website; this data is aggregated and does not identify you personally.

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data in certain circumstances
• Right to restrict processing — to request that we limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making — we do not make solely automated decisions that significantly affect you

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our client portal uses encrypted connections and authenticated access controls.

10. International Transfers

Your data is stored and processed within the United Kingdom and the European Economic Area. Where data is transferred outside these regions, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. We encourage you to review this policy periodically.

12. Contact & Complaints

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@schemedevelopments.co.uk.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Questions? Contact us at hello@schemedevelopments.co.uk or write to the Information Commissioner's Office at ico.org.uk.