Privacy Policy

Introduction

poppy-engine Limited ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website poppy-engine.com or engage our services.

We take our responsibilities regarding your personal data seriously and have designed our processes to comply with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We may collect information about you in various ways. The information we collect depends on how you interact with us.

Information You Provide Directly

When you contact us via email or engage our services, we may collect:

• Your name and job title
• Your email address and contact details
• Your organisation name and address
• Information about your business and financial management needs
• Any other information you choose to provide in correspondence

Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device and usage patterns:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website address
• Date and time of visits

How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and communicate with you
• To provide our consultancy services
• To send you relevant information about our services where you have consented
• To improve our website and services
• To comply with legal obligations
• To protect our legitimate business interests

Legal Basis for Processing

Under UK data protection law, we must have a legal basis for processing your personal data. We rely on the following bases:

• Contract: Processing necessary to fulfil our contractual obligations to you
• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Legitimate interests: Processing necessary for our legitimate business interests, provided these do not override your fundamental rights
• Legal obligation: Processing necessary to comply with applicable laws

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service providers who assist with our business operations (such as IT support or professional advisors)
• Professional bodies or regulatory authorities where required
• Other parties where required by law or to protect our legal rights

Any third parties with whom we share data are required to protect your information in accordance with applicable law.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

For clients, we typically retain engagement records for seven years after the conclusion of our relationship. For website visitors who have not become clients, we retain enquiry data for two years.

Your Rights

Under UK data protection law, you have the following rights:

• Access: You can request a copy of the personal data we hold about you
• Rectification: You can ask us to correct inaccurate or incomplete data
• Erasure: You can ask us to delete your personal data in certain circumstances
• Restriction: You can ask us to restrict how we use your data
• Portability: You can ask for a copy of your data in a machine-readable format
• Objection: You can object to our processing of your data in certain circumstances

To exercise any of these rights, please contact us using the details provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted communications, secure storage, access controls, and regular security reviews.

International Transfers

Your personal data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. You can contact the ICO at poppy-engine.com or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.