Privacy Policy

We collect personal information when you:

• Complete enquiry or quote request forms
• Apply for job vacancies or graduate recruitment schemes
• Create a user account
• Subscribe to our services
• Contact us directly

This may include:

• Name and contact details (email, phone, address)
• Business information (company name, job title)
• Project requirements and specifications
• Payment and billing information
• Account credentials and preferences
• Communication records

When you visit our website, we automatically collect:

• IP address and location data
• Browser type and version
• Operating system
• Pages visited and time spent
• Referral sources
• Device information

We use cookies and similar technologies to improve your experience. See our Cookie Policy for detailed information about the cookies we use and your choices.

We process your personal data based on:

• Consent: When you provide explicit consent (e.g., marketing communications)
• Contract: To provide services you've requested or maintain your account
• Legitimate Interest: To improve our services, security, and business operations
• Legal Obligation: To comply with applicable laws and regulations

We use your personal data to:

• Respond to enquiries and provide quotes
• Deliver requested services and maintain user accounts
• Process applications and recruitment
• Send service updates and important communications
• Improve our website and services
• Comply with legal obligations
• Prevent fraud and ensure security

We may send you marketing communications if you've consented or where we have legitimate interest. You can opt-out at any time using the unsubscribe link or contacting us directly.

We do not sell your personal data. We may share information with:

Third-party providers who assist with:

• Website hosting and maintenance
• Payment processing
• Email delivery
• Customer support systems
• Analytics and reporting

We may disclose information when required by law or to:

• Comply with legal obligations
• Protect our rights and property
• Ensure user safety
• Respond to lawful requests from authorities

If we sell or transfer our business, your information may be transferred to the new owner with appropriate safeguards.

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and staff training
• Secure data centres within the UK/EEA

However, no internet transmission is completely secure. You transmit information at your own risk.

We retain personal data only as long as necessary for the purposes outlined in this policy:

• Account information: Until account deletion plus 7 years for legal compliance
• Enquiry/quote data: 3 years from last contact
• Application records: 2 years from application date
• Marketing data: Until you withdraw consent
• Legal/financial records: 7 years as required by law

Your data is primarily stored within the UK and EEA. If we transfer data outside these areas, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses.

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Object: Opt-out of certain processing activities
• Withdraw Consent: For consent-based processing

To exercise these rights, contact us at info@elmscreative.com or write to our registered address.

If you're concerned about how we handle your data, you can:

1. Contact us directly to resolve the issue
2. Complain to the Information Commissioner's Office (ICO):
   • Website: ico.org.uk
   • Helpline: 0303 123 1113

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing personal information.

Our services are not intended for children under 16. We do not knowingly collect personal data from children under 16 without parental consent.

We may update this Privacy Policy periodically. Significant changes will be communicated via email or website notice. The "Last updated" date indicates when changes were made.

For privacy-related questions or to exercise your rights:

• Post: Elms Creative Ltd, Basepoint Business Centre, Enterprise Close, Christchurch, Dorset BH23 6NX

This policy complies with UK Data Protection Act 2018 and UK GDPR requirements.