Privacy Policy (UK)
Last Updated: April 2025
At Project Thirty Eight, we take your privacy seriously. This Privacy Policy outlines how we collect, use, and safeguard your personal data when you visit our website.
1. Information We Collect
We collect and process the following types of personal data:
Personal Information: When you contact us or use our services, we may collect your name, email address, phone number, and other relevant details.
Technical Data: This includes your IP address, browser type, device information, and how you interact with our website (such as pages visited and links clicked), collected via cookies and other tracking technologies.
2. How We Use Your Information
We use your data for the following purposes:
To provide, personalise, and improve our services.
To communicate with you regarding your inquiries, bookings, or any services you request.
To send you marketing communications (if you’ve opted in to receive them).
To comply with legal obligations and protect our rights.
3. Lawful Basis for Processing Personal Data
Under the UK GDPR, we process your personal data on the following lawful bases:
Consent: You have given us permission to process your data, for example, when you subscribe to our newsletter or contact us.
Contractual necessity: We process your data to fulfil a contract or agreement, such as providing our services.
Legitimate interests: We process data to pursue our legitimate business interests, provided these do not override your rights and interests.
4. Data Retention
We will keep your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Once your data is no longer needed, we will securely delete or anonymise it.
5. Sharing Your Information
We do not sell your personal data. However, we may share your data with third parties who assist us with our business operations, such as service providers or partners, but only for the purposes described in this policy. We ensure these third parties comply with data protection laws.
6. Your Rights
As a data subject, you have the following rights under the UK GDPR:
Access: You can request a copy of the personal data we hold about you.
Correction: You can ask us to correct any inaccurate data.
Deletion: You can request the deletion of your data in certain circumstances.
Restriction: You can request that we limit the processing of your data.
Objection: You can object to the processing of your data in some cases.
Data Portability: You can request that we transfer your data to another organisation in certain formats.
You also have the right to withdraw consent for marketing communications at any time.
7. Security
We take appropriate measures to protect your personal data, including encryption, secure servers, and access controls, to prevent unauthorized access, use, or disclosure.
8. Cookies
For information about how we use cookies on our website, please see our Cookie Policy below.
9. Contact Us
If you have any questions about your privacy rights or wish to exercise them, please email kelly@project-38.com