Privacy notice

1. Who we are

PRIYATIZE LTD (“Priyatize”, “we”) is the controller for personal data processed through this website and when you enquire about our work. Company number SC827703. Registered office: Summit House, 4–5 Mitchell Street, Edinburgh EH6 7BD, Scotland, United Kingdom.

We have not appointed a statutory data protection officer. The practice is not required to. Privacy enquiries go to privacy@priyatize.com, and general correspondence to hello@priyatize.com. The supervisory authority is the Information Commissioner’s Office (ICO), ico.org.uk.

This notice is not advice on your own processing as a client. Client work is covered in the engagement terms, not by this page.

2. The data we process

Please do not send special-category data, account passwords, or payment card numbers. We do not ask for them, and the form is not a place for them.

3. Lawful basis

• Replying to an enquiry. Legitimate interests in answering a request you started. If we go on to work together, the same details may be used for steps toward a contract.
• The confirmation box. Makes that purpose explicit. It is not consent to marketing, and there is no mailing list. You can ask us to stop.
• Running and securing the site. Legitimate interests in a working, abuse-resistant website.
• Legal duties. Where company or tax law later requires a record of a client relationship. That record is not created by this website.

You do not have to use the form. You can email us instead. If you give neither, we cannot reply.

4. The enquiry form

The server checks length, a valid email, the confirmation, a hidden field that drops automated spam, a limit on repeated attempts, and that the post came from this site. The message is not written into a database. It is returned to your browser so your own email programme can send it. You keep the copy. We receive it as ordinary correspondence.

We do not sell personal data. We do not use enquiry details for marketing.

5. Who else sees it

Recipients are limited to:

• the people at Priyatize who need to reply;
• the provider that hosts our email, acting on our instructions;
• professional advisers, if a matter actually requires them;
• a public authority, if the law requires it.

There are no advertising networks and no data brokers.

6. Where it is kept

We do not routinely transfer personal data outside the United Kingdom. If a transfer outside the UK, including to the European Economic Area or beyond, becomes necessary, we put an appropriate safeguard in place under UK GDPR before it happens. Adequacy regulations or the UK International Data Transfer Agreement are the usual routes. We do not rely on a pre-Brexit “EEA only” statement.

7. How long

• The in-memory abuse counter: up to 15 minutes.
• Correspondence about a possible instruction: only as long as needed to reply and record the outcome, and not longer than 24 months, unless a client relationship or a legal duty requires more.
• Accounting records of an actual engagement: as company and tax law requires.
• Your cookie choice: on your device until you clear it or choose again.

8. Your rights

You may ask for access, correction, erasure, restriction, or a portable copy of personal data we hold, and you may object to processing based on legitimate interests. Where a record depends on consent, you may withdraw it. Withdrawal does not undo a reply already sent.

Write to privacy@priyatize.com. We respond within one calendar month. If a request is complex we may extend that by up to two further months, and we will tell you. We may need to confirm you are the person the data is about before we act.

You can complain to the ICO at ico.org.uk. We would like the chance to put something right first, but you do not have to come to us before you complain.

9. Children

This site is not directed at children. We do not knowingly collect personal data from anyone under 18.

10. Automated decisions

We do not use your personal data for automated decision-making or profiling that produces a legal effect, or a similarly significant effect, on you.

11. Cookies

See the cookie policy. Non-essential cookies are not loaded. Fonts are served from this site, so a visit does not call a third-party font host.

12. Security and changes

The controls on the site are described on the security page. No website is free of risk.

If this notice changes, the date at the top changes with it. Continued use of the site after that date is use under the updated notice.