Privacy Policy
Template notice: This is a standard UK GDPR / Data Protection Act 2018 starting template. Please have it reviewed by a qualified adviser before publishing or relying on it.
1. Who we are
This privacy policy applies to Gammatec (“we”, “us”, “our”), a company registered in England & Wales, with its registered office at 128 City Road, London EC1V 2NX, United Kingdom.
For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, Gammatec is the data controller for personal data we collect about you.
2. How to contact us
If you have any questions about this policy or how we handle your personal data, please contact us at info@gammatec.xyz or by post at the registered address above.
3. The personal data we collect
We collect and process the following categories of personal data:
- Identity and contact data — your name, company, job title, email address, and phone number when you contact us, request a proposal, or engage our services.
- Engagement data — information you provide while we deliver work for you, including documents, files, and access credentials shared with us.
- Technical data — IP address, browser type, device information, and usage data collected automatically when you visit our website.
- Communication data — records of correspondence with us, including emails, meeting notes, and call records.
4. How we use your personal data and our lawful bases
We will only use your personal data when the law allows us to. We rely on the following lawful bases:
- Contract — to negotiate, enter into and perform our agreement with you.
- Legitimate interests — to run, improve and protect our business, including responding to enquiries, securing our systems, and keeping records.
- Legal obligation — to comply with tax, accounting, and other legal requirements.
- Consent — where you have given us specific consent (for example, for marketing communications). You may withdraw consent at any time.
5. Sharing your personal data
We do not sell your personal data. We may share it with trusted third parties who help us operate our business, including:
- Cloud hosting and software providers used to deliver our services.
- Professional advisers (accountants, lawyers, insurers).
- Authorities where required by law.
All third parties are required to respect the security of your personal data and treat it in accordance with the law.
6. International transfers
Some of our service providers may process personal data outside the UK. Where this happens, we ensure an appropriate safeguard is in place, such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK Addendum, or an applicable adequacy regulation.
7. Data retention
We keep personal data only for as long as necessary for the purposes set out in this policy, to comply with our legal obligations, and to resolve disputes. Engagement records are kept for the period required to meet our tax, accounting and contractual record-keeping obligations.
8. Your rights
Under UK data protection law you have rights including:
- Access to your personal data.
- Rectification of inaccurate data.
- Erasure of your data in certain circumstances.
- Restriction of processing.
- Objection to processing based on legitimate interests.
- Data portability.
- Withdrawal of consent at any time.
To exercise any of these rights, please contact us using the details in section 2. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
9. Security
We have appropriate technical and organisational measures in place to protect personal data against unauthorised access, loss, or disclosure. Access to client data is limited to people who need it to do their work.
10. Cookies
Our website uses a small number of cookies. See our Cookie Policy for details.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page with the “last updated” date.