About this privacy policy
This policy explains how Clay & Daughter Ltd handles personal information collected through www.clayanddaughter.com, website enquiries and related business communications. It describes what information we receive, why we use it, who may receive it and your choices.
It is written with reference to the UK GDPR and Data Protection Act 2018, as amended. The Privacy and Electronic Communications Regulations (PECR) also apply to relevant cookies and electronic marketing. Reading this policy, browsing the website or submitting an enquiry does not, by itself, give consent to optional tracking or unrelated marketing.
How to contact us
Please contact Ian Clay with questions about your personal information, this policy or a request to exercise your rights.
Clay & Daughter Ltd
Business contact address: Cranwood, Sandy Lane, Kingswood, Surrey, KT20 6NL, United Kingdom.
Email: ian@clayanddaughter.com
Telephone: +44 (0) 20 7946 0958
About us
Clay & Daughter Ltd is the controller responsible for the website activities described in this policy. We are registered in England and Wales under company number 13991909. Our VAT registration number is GB413634910.
This policy concerns our own website and enquiry handling. It does not describe every processing activity that may arise during a client project or other relationship; additional privacy information may be needed for those activities.
What information we collect
Information you provide. Our contact form asks for your name, email address and enquiry message. We also receive information you choose to include in an email, telephone conversation or subsequent correspondence, such as your organisation, role, contact details and service requirements.
Website information. Hosting, content delivery, security, font and consent-management services may process technical information when your browser connects to them, including your IP address, browser and device information.
Analytics information. Google Analytics is present on the website. Its service description in Privacy Settings includes browsing and interaction information, pages viewed, device and browser information, IP address and online identifiers. The precise information processed depends on the enabled features and consent configuration.
Please provide only the information needed for your enquiry and avoid unnecessary sensitive information or information about other people. Providing enquiry information is voluntary, but without contact details and enough information about your request, we may be unable to respond.
How we use your information and our lawful bases
Responding to enquiries. We use your details to understand your request, reply and discuss relevant services. Our lawful basis is legitimate interests in responding to business enquiries and developing relevant business relationships. Ian Clay receives enquiries by email; details may also be stored in a customer relationship management (CRM) system.
Operating and protecting the website. Our lawful basis is legitimate interests in providing and protecting the website. Where PECR requires consent for storing or accessing information on your device, that consent is also needed; a legitimate interest does not override this requirement.
Optional analytics. Where consent is required, we rely on consent for the associated processing of personal information. Use Privacy Settings to review and change optional-service choices. See our Cookie Policy for more information.
Legitimate interests requires us to consider the necessity of the processing and balance our interests against your rights and reasonable expectations. You may object to processing based on this basis.
Marketing communications
We may send website contacts information about our services. Where PECR requires consent for electronic marketing, we rely on consent. Submitting an enquiry is not, by itself, consent to unrelated marketing.
Where PECR permits relevant marketing to corporate subscribers without consent, our basis for processing named business contacts’ details is legitimate interests in promoting relevant services to business customers, taking account of their rights and reasonable expectations. Sole traders and certain partnerships are treated differently under PECR.
You can object to direct marketing at any time by emailing us or using the unsubscribe option in a marketing email. We will stop using your personal information for that purpose. Where processing relies on consent, you can withdraw it without affecting processing that was lawful before withdrawal.
Who receives your information
Our website contact form sends enquiry details through form.taxi. Ian Clay receives enquiries by email. Our email provider and a CRM provider may process or store the details to support our communications and management of business enquiries.
Webflow provides the website platform. Other identified website services include Usercentrics for privacy choices, Google services, Cloudflare Turnstile on the contact page, and Webflow and CloudFront content delivery. Not every service receives enquiry messages: the information involved depends on the function it performs.
Our Cookie Policy explains the identified website services and available controls. The provider and access arrangements for email and CRM storage are subject to the confirmation notes accompanying this draft.
How long we keep information
Website enquiry information is kept for up to three years.
Technical records, consent records and analytics data have separate retention arrangements and settings. Cookie expiry periods are different from the time a provider retains personal information on its servers.
The starting point for the three-year limit, its application to email and CRM copies and backups, and the retention settings for technical, consent and analytics data must be confirmed before this draft is published. No additional fixed retention periods are assumed here.
Keeping personal information secure
Protecting personal information involves appropriate access controls and organisational and technical measures, including arrangements with service providers. The specific measures and authorised access arrangements used for website enquiries must be verified before publication.
No online system or method of communication can be guaranteed completely secure. Please avoid sending unnecessary sensitive information through the contact form, and contact us if you have a concern about information you have provided.
International processing and transfers
Our website and business service providers may process or store personal information outside the UK, including through a CRM hosted overseas. The website’s Google Analytics disclosure identifies Google Ireland Limited and possible processing in other countries, including the United States.
Where a restricted transfer occurs, UK data protection law requires an applicable transfer arrangement, such as recognised adequacy arrangements or appropriate safeguards. Providing information through our website does not, by itself, constitute consent to a restricted transfer.
Your rights and choices
Depending on the circumstances, data protection law gives you rights to:
- Receive information about how your personal information is used.
- Request access to your personal information.
- Request correction of inaccurate or incomplete information.
- Request erasure or restriction of processing.
- Object to processing based on legitimate interests.
- Receive a portable copy of information you have provided, where the conditions for portability apply.
- Withdraw consent where processing relies on it.
These rights are subject to legal conditions and exceptions. Your right to object to direct marketing is absolute. You can withdraw consent at any time without affecting processing that was lawful before withdrawal.
Contact Ian Clay using the details above to make a request. We may need information to verify your identity and locate the relevant records. Requests are normally free and handled within one month, subject to lawful extensions or exceptions.
The website inspection did not identify automated decisions with legal or similarly significant effects. Whether CRM activity involves profiling or automated decisions must be confirmed before publication.
Cookies and external websites
Use the website’s Privacy Settings control to review categories and services, reject optional services or change your choices. For details, see our Cookie Policy.
The website includes links to external services, such as LinkedIn. Those services have their own privacy information and controls. Check their policies when you visit them.
Complaints
If you have a concern about our handling of your personal information, please contact us so we can try to resolve it.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk/make-a-complaint. You do not have to contact us before making a complaint to the ICO.
Changes to this policy
We will review this policy when our website services or information-handling practices change. The date at the top identifies the latest revision.