Privacy Policy

1. Who we are

Dizzy Squirrel Limited is the controller of the personal information described in this policy unless we explain otherwise in a particular project or service arrangement.

Dizzy Squirrel Limited is registered in England and Wales under company number 08289439. Our registered office is 24 Dunley Way, Hampton Park, Salisbury, SP1 3GW, United Kingdom.

You can contact us about privacy matters at enquiries@dizzysquirrel.com or by telephone on 01722 658 100.

2. Scope of this policy

This policy covers personal information we handle in connection with this website, enquiries, prospective client discussions, client and supplier relationships, normal business administration and communications.

Where Dizzy Squirrel processes personal information on behalf of a client as part of a software, website, app, API or other development project, our role and responsibilities may instead be governed by the relevant client agreement and any applicable data-processing terms.

3. Personal information we may collect

The information we collect depends on how you interact with us. It may include:

• Identity and contact information, such as your name, job title, organisation, email address, telephone number and business address.
• Enquiry and project information, including the details you give us about a proposed project, business requirement, existing system, timescale or budget.
• Client and supplier records, such as contractual details, quotations, purchase orders, invoices, payment records, project correspondence and contact history.
• Communications, including emails, meeting notes and other correspondence with you.
• Website and technical information, such as IP address, browser or device information, requested pages, timestamps, server/security logs and similar technical records generated when the website is accessed.
• Analytics information, where you consent to analytics cookies, including aggregated information about website visits, traffic sources and use of pages.
• Other information you choose to provide where it is relevant to an enquiry, project or business relationship.

Please avoid sending highly sensitive personal information, passwords, payment-card details or special-category information through ordinary website or email communications unless it is genuinely necessary and an appropriate method has been agreed.

4. Where we get personal information

We obtain most personal information directly from you when you contact us, discuss a project, enter into a business relationship or communicate with us.

We may also receive business contact information from colleagues, clients, suppliers, referrals or publicly available professional and company sources where this is appropriate for a legitimate business purpose. Technical website information may be generated automatically by our website, hosting infrastructure, security tools and – where you have consented – analytics services.

5. Why we use personal information and our lawful bases

UK data protection law requires us to have a lawful basis for each purpose for which we use personal information. The bases most relevant to our activities are contract, legal obligation, legitimate interests and consent.

Purpose	Typical lawful basis
Responding to enquiries, discussing requirements and taking steps you ask us to take before entering a contract	Steps before entering a contract and/or our legitimate interests in responding to genuine business enquiries
Providing services, managing projects and communicating with clients or suppliers	Contract and/or legitimate interests in managing our business relationships
Invoices, accounts, tax, compliance and other records we are required to maintain	Legal obligation and, where relevant, legitimate interests in managing and protecting our business
Operating, securing, diagnosing and maintaining our website and systems	Legitimate interests in running secure and reliable business systems
Understanding use of the website through optional analytics	Consent
Establishing, exercising or defending legal claims and dealing with disputes	Legitimate interests in protecting our legal and commercial position
Direct marketing, where we carry it out	Consent or legitimate interests where permitted by applicable data-protection and electronic-marketing rules

Where we rely on legitimate interests, those interests may include responding to business enquiries, maintaining business relationships, securing our systems, preventing misuse, improving our services and protecting our legal or commercial position. We consider whether the processing is necessary and balance those interests against the rights and interests of the people concerned.

6. Cookies and website analytics

Our website uses necessary cookies to support essential functionality such as remembering cookie-consent choices. We may also use Google Analytics to understand how visitors use the website, but optional analytics cookies are used only where the required consent has been given.

Our Cookie Policy explains the cookie categories currently disclosed on the website, the individual cookie names and how you can manage your choices.

7. Direct marketing

We do not sell personal information or provide personal information to unrelated organisations so that they can market their own products to you.

If we send direct marketing, we will do so only where permitted by data-protection and electronic-marketing law. You can ask us to stop using your contact details for direct marketing at any time by contacting us or using an unsubscribe method provided with the communication.

8. Who we share personal information with

We only disclose personal information where there is a business or legal reason to do so. Depending on the circumstances, recipients may include:

• website hosting, infrastructure, backup, security and IT service providers;
• email, communications and collaboration service providers;
• analytics providers, where you have consented to the relevant analytics processing;
• professional advisers such as accountants, insurers or legal advisers;
• contractors or specialist suppliers who need information to support an agreed project, subject to appropriate confidentiality and data-protection arrangements;
• banks, payment or accounting providers involved in normal business transactions; and
• regulators, public authorities, courts or other parties where disclosure is required by law or reasonably necessary to protect legal rights.

Where another organisation processes personal information on our behalf, we expect it to use the information only for the relevant service and to protect it appropriately.

9. International transfers

Some technology and service providers may store or process personal information outside the United Kingdom. Where a transfer is restricted by UK data-protection law, we take reasonable steps to ensure that an appropriate transfer mechanism or safeguard is in place, such as an applicable UK adequacy regulation or appropriate contractual safeguards.

You can contact us if you would like further information about the safeguards relevant to a particular transfer involving your personal information.

10. How long we keep personal information

We do not keep personal information indefinitely just in case it becomes useful. Retention depends on why the information is held, the nature of our relationship, applicable legal or accounting requirements, security needs and whether information may reasonably be needed in relation to a legal claim.

• Enquiries and prospective-client correspondence are kept while the enquiry is active and are periodically reviewed once there is no continuing business need.
• Client and supplier records are normally retained for the duration of the relationship and for an appropriate period afterwards where needed for accounting, tax, contractual, support or legal purposes.
• Website security and technical logs are retained for periods appropriate to operational, diagnostic and security needs.
• Analytics information is retained according to our configured analytics settings and only for as long as it remains useful for the stated analytics purpose.

When personal information is no longer required, we delete it, anonymise it or otherwise remove it from routine use where reasonably practicable.

11. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. The measures used depend on the nature of the information and the systems in which it is processed.

No internet transmission or storage system can be guaranteed to be completely secure. If you need to send particularly sensitive information, please contact us first so that an appropriate method can be agreed.

12. Your data-protection rights

Depending on the circumstances and the lawful basis involved, UK data-protection law may give you rights including:

• the right to be informed about how your personal information is used;
• the right to ask for access to personal information we hold about you;
• the right to ask us to correct inaccurate or incomplete information;
• the right to ask for personal information to be erased in certain circumstances;
• the right to ask us to restrict processing in certain circumstances;
• the right to object to processing based on legitimate interests and to object to direct marketing;
• the right to data portability where the legal conditions for that right apply; and
• the right to withdraw consent at any time where consent is the basis for processing.

These rights are not all absolute and exemptions can apply. If you make a request, we may need to verify your identity and may ask for information needed to understand or locate the relevant records.

There is normally no fee for exercising your data-protection rights. A fee or refusal may be permitted in limited circumstances allowed by law, for example where a request is manifestly unfounded or excessive.

13. Automated decision-making

We do not use information collected through this website or ordinary business enquiries to make solely automated decisions about individuals that have legal or similarly significant effects.

14. Complaints

If you have a concern about how we use your personal information, please contact us first so that we can investigate and respond.

You also have the right to complain to the UK Information Commissioner’s Office (ICO). Information about making a data-protection complaint is available at ico.org.uk. The ICO can also be contacted on 0303 123 1113 or at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

15. Links to other websites

Our website may link to websites or services operated by other organisations. We do not control those organisations’ privacy practices. If you follow an external link, you should review the privacy information provided by the organisation responsible for that website or service.

16. Changes to this policy

We may update this policy when our website, services, data-processing activities or applicable requirements change. The version published on this page is the current version, and the date at the top shows when it was last updated.

17. Contact us

To exercise a data-protection right or ask a privacy question, contact:

Dizzy Squirrel Limited
24 Dunley Way, Hampton Park
Salisbury
SP1 3GW
United Kingdom

Company number: 08289439
Telephone: 01722 658 100
Email: enquiries@dizzysquirrel.com

For information about cookies used by this website, see our Cookie Policy. For the terms governing use of the website, see our Terms & Conditions.