Privacy Policy
This website is operated by Brock Technologies Ltd, a company registered in England & Wales (company number 17335993), registered office 28 Gainsborough Crescent, Henley-on-Thames, RG9 1TA, United Kingdom. In this policy, "we", "us" and "our" refer to Brock Technologies Ltd, and "this website" refers to the site published at softlarm.uk.
Brock Technologies Ltd is the data controller for the personal data described below. For any question about this policy or your personal data, email [email protected] or write to the registered office above.
1. What this policy covers
This policy explains what personal data we collect through this website, why we collect it, how long we keep it and what rights you have over it. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It does not cover any third-party website you reach by following a link from here.
2. Personal data we collect
- Data you send us through the enquiry form: your name, your email address, your company name if you give one, any services you tick, and the content of your message.
- Data you send us directly: anything you include when you email or telephone us, including a phone number if you provide one.
- Technical data recorded by our hosting provider: your IP address, the date and time of the request, the pages requested and your browser's user-agent string. These are standard web-server logs and are used for security and fault diagnosis.
- A single storage item on your device: we store one item,
softlarm_cookies, in your browser's local storage to remember your cookie choice. It contains no personal data. See our Cookie Policy.
We do not run analytics, advertising or tracking software on this website. We do not use profiling or automated decision-making, and we do not knowingly collect data from children.
3. Why we process it, and our lawful basis
| Purpose | Data used | Lawful basis (Art. 6 UK GDPR) |
|---|---|---|
| Replying to your enquiry and preparing a quote or proposal | Name, email, company, services selected, message | Steps taken at your request prior to entering a contract — Art. 6(1)(b) |
| Delivering and supporting work you have commissioned | Contact details and correspondence | Performance of a contract — Art. 6(1)(b) |
| Keeping the website secure and diagnosing faults | Server log data including IP address | Legitimate interests — Art. 6(1)(f): keeping our service available and secure |
| Keeping accounting and tax records | Invoicing and contract records | Legal obligation — Art. 6(1)(c) |
| Remembering your cookie choice | Local storage item only, no personal data | Strictly necessary to provide the function you asked for |
We do not send marketing emails and we do not add enquirers to a mailing list. If that ever changes we will ask for your consent first, and you will be able to withdraw it at any time.
4. How long we keep it
- Enquiries that do not become projects: 24 months from your last message, then deleted.
- Client correspondence and project records: for the life of the engagement and 24 months afterwards.
- Invoices and accounting records: six years after the end of the financial year they relate to, as required by UK tax law.
- Web-server logs: up to 30 days.
- Your cookie choice: stored in your browser until you clear your browser storage.
5. Who else handles your data
We do not sell, rent or trade personal data, and we do not share it for anyone else's marketing. We do use a small number of service providers who process data on our behalf:
- Our website hosting provider — stores this website and its server logs on servers in the United Kingdom.
- Our email provider — receives and stores the email correspondence between us.
- Google LLC (Google Fonts) — this website loads its typeface from
fonts.googleapis.comandfonts.gstatic.com. Your browser's IP address is visible to Google when it fetches those files. - Cloudflare, Inc. (cdnjs) — this website loads its animation library from
cdnjs.cloudflare.com. Your browser's IP address is visible to Cloudflare when it fetches that file.
A current list of our providers is available on request. We may also disclose personal data where we are required to by law, by a court, or by a regulator.
6. Transfers outside the UK
Our hosting and email are provided within the United Kingdom. The two font and library providers named above (Google LLC and Cloudflare, Inc.) are established in the United States, so requests your browser makes to them involve a transfer of your IP address to the United States. Those transfers rely on the UK Extension to the EU–US Data Privacy Framework and, where applicable, on the UK International Data Transfer Addendum to the European Commission's standard contractual clauses. No other personal data is transferred outside the UK.
7. Security
This website is served over HTTPS. Access to enquiry data is limited to the people in our team who need it, on accounts protected by two-factor authentication. No system is perfectly secure, but we keep our software patched and we do not retain data we no longer need.
8. Your rights
Under the UK GDPR you have the right to:
- be told what personal data we hold about you and receive a copy of it (access);
- have inaccurate data corrected (rectification);
- have data deleted where we no longer have a reason to keep it (erasure);
- ask us to restrict how we use your data while a query is resolved (restriction);
- receive the data you gave us in a portable, machine-readable format (portability);
- object to processing we carry out on the basis of legitimate interests (objection);
- withdraw consent at any time for anything we process on the basis of consent, without affecting processing carried out before you withdrew it.
9. How to exercise your rights
Email [email protected] or write to Brock Technologies Ltd, 28 Gainsborough Crescent, Henley-on-Thames, RG9 1TA. We respond within one month of receiving your request, as required by the UK GDPR. If a request is unusually complex we may extend that by a further two months and will tell you why within the first month. There is no charge.
10. Complaints
If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO): www.ico.org.uk, helpline 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
11. Changes to this policy
If we change this policy we will update the date at the top of the page. Material changes will be summarised here for at least three months.