EXCOLO33 PRIVACY POLICY

OUR GUIDING PRINCIPLES

  • Data protection is a human right.
  • Your data is our responsibility and as such will be treat with respect.
  • We will never spam, sell or use your data for purposes other than those agreed to.

DATA PROTECTION LEGISLATION

We comply with:

  • UK Data Protection Act 1988 (DPA)
  • EU Data Protection Directive 1995 (DPD)
  • EU General Data Protection Regulation 2018 (GDPR)

DATA COLLECTION

This website collects and uses personal information for the following reasons:

Tracking site visitors

Our site uses Google Analytics (GA) to track user interaction. We use this data to better understand our users and their usage of our website. Google does not give us any personal information about you or your business.

Google are a third party data processor.

GA makes use of cookies, details of which can be found on Google’s developer guides.

Disabling cookies on your internet browser will stop GA from tracking any part of your visit to pages within this website.

Blog posts

Comments can contain personal information, please ensure that if you don't want to let us have this information do not post a comment on our blog.

Comments are public and therefore your data will show on the post itself.

Forms and email links

Forms on our site send the content to an internal email address.

All email is sent to us over the (SMTP). Our SMTP servers are protected by TLS (sometimes known as SSL) This means email content is encrypted using SHA-2, 256-bit cryptography before being sent across the internet. The email content is decrypted by our devices.

Email signups

The email address that you submit to us will be added to our email marketing service who provide us with email marketing services. This service is a third party data processor.

Your email address will be stored in in our email marketing service providers database for as long as we continue to use this service for email marketing or until you request removal from the service.

When requesting removal via email, please send your email to us using the email account that is subscribed to the mailing list. Without this we cannot identify you.

If you are under 16 years of age by law you must obtain parental consent before signing up for any of our services.

WEBSITE SERVER

This website is hosted by Catalyst2 within a UK data centre located in London.

All traffic between our website and your browser is encrypted and delivered over HTTPS.

THIRD PARTY DATA PROCESSORS WE USE

All the 3rd party data processors we use comply with the legislation set out in the GDPR. Where they are based in the USA they are EU-U.S Privacy Shield compliant.

DATA BREACHES

As required by GDPR we will report any unlawful data breach of this website’s data or any of our third party data processors to the ICO within 72 hours.

Data Controller

The data controller is Craig Alexander Rattray Limited

Whose office is:
20-23 Woodside Place
Glasgow
G3 7QL

CHANGES TO OUR PRIVACY POLICY

This privacy policy may change from time to time inline with legislation. We won't inform our clients or website users of these changes. Please check back about this policy as required.