9. Data Protection and Privacy

9.1 Data Collection - In the course of delivering our Services, we may collect both personal and non-personal information from you. This may include, but is not limited to, your contact details, billing information, project materials, and any data reasonably required to fulfil our obligations. All data is handled in compliance with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

9.2 Use of Data - We use your data to manage communication, process payments, deliver our Services, and improve our internal processes. From time to time, we may use your contact details to share updates, newsletters, or promotional material. You can opt out of receiving marketing communications at any time by following the instructions provided in those communications or by contacting us directly.

9.3 Data Sharing - We will not sell, rent, or disclose your personal data to third parties without your explicit consent, unless legally required or necessary for the performance of our Services. In certain instances, we may share your data with trusted subcontractors or service providers who assist us in delivering our Services. These third parties will only process your data under strict instructions and are required to comply with similar data protection standards.

9.4 Data Security - We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, loss, misuse, or disclosure. These measures include access restrictions, secure servers, and encryption where applicable. While we take reasonable steps to protect your data, we cannot guarantee complete security due to the nature of internet-based communications and data storage.

9.5 Data Retention - We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, to resolve disputes, or to enforce our agreements. When data is no longer required, we will securely delete or anonymise it in line with applicable laws.

9.6 Your Rights - You have the right to access, correct, delete, or restrict our use of your personal data. You may also object to certain types of processing and request data portability where applicable. To exercise these rights, please contact us using the details set out in these Terms. We will respond to your request in accordance with applicable data protection legislation.