1. Who we are
Positive Square is a software and web development company based in the United Kingdom. If you have any questions or requests regarding your data, please use the contact form on our website.
2. What data we collect
We may collect the following information when you use our website or contact us:
- Your name and email address when you fill in a contact form or enquire about our services
- Technical data such as your IP address, browser type, and pages visited, collected automatically via server logs or analytics
- Any information you voluntarily provide in messages or project briefs
3. How we use your data
We use the information we collect to:
- Respond to your enquiries and provide the services you have requested
- Send project updates or communications directly related to work we are carrying out for you
- Improve our website and understand how visitors use it
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Legal basis for processing
- Legitimate interests — to respond to enquiries and manage client relationships
- Contract — where processing is necessary to deliver services you have engaged us for
- Consent — where you have explicitly opted in, such as subscribing to updates
5. Cookies
Our website may use essential cookies to ensure basic functionality. We do not use third-party advertising or tracking cookies. Where analytics are used, they are configured to anonymise IP addresses and not share data with advertising networks.
6. Data retention
We retain contact enquiry data for up to 2 years. Client project data is retained for as long as required to fulfil the engagement and for a reasonable period thereafter for legal and accounting purposes.
7. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data where we have no ongoing legal basis to retain it
- Object to processing or request restriction of processing
- Data portability — receive your data in a structured, commonly used format
To exercise any of these rights, please contact us via our website. We will respond within 30 days.
8. Third-party services
We may use third-party tools such as email providers or hosting infrastructure. These providers are selected for their GDPR compliance and process only the data necessary for their function.
9. Data security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. All data in transit is encrypted via HTTPS.
10. Changes to this policy
We may update this policy from time to time. Material changes will be noted on this page with an updated date. Continued use of our website following changes constitutes acceptance.
11. Complaints
If you are unsatisfied with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.