VoicePower Ltd. Privacy Policy

CONTENTS

1. Important information and who we are
2. The types of personal data we collect about you
3. How is your personal data collected?
4. How we use your personal data
5. Third-party links and services
6. Disclosures of your personal data
7. International transfers
8. Data security
9. Data retention
10. Your legal rights
11. Complaints
12. Changes to the privacy policy and your duty to inform us of changes

1. Important information and who we are

This privacy policy gives you information about how VoicePower Limited collects and uses your personal data through your use of this website, including any data you may provide when you contact us, or subscribe to a product or service from us, attend an event with us, or sign up to a free trial through us.

This website is not intended for children, and we do not knowingly collect data relating to children. In cases where our products or services may be used by or for children, VoicePower only processes data relating to the educational organisation and not the children.

Controller

VoicePower Limited is the controller and responsible for your personal data (collectively referred to as VoicePower, “we”, “us” or “our” in this privacy policy).

If you have any questions about this privacy policy or about the use of your personal data or you want to exercise your privacy rights, please contact us in the following ways:

2. The types of personal data we collect about you

Personal data means any information about an individual from which that person can be identified.

We may collect, use, store and transfer different kinds of personal data about you which we have categorised as follows:

• Identity Data includes names, username or similar identifier, title, date of birth and gender.
• Contact Data includes billing address, delivery address, company address, personal and work email address, and personal and work telephone numbers.
• Professional Data includes job title and company name.
• Interaction Data includes contents of your correspondences with us, such as emails.
• Financial and Transaction Data includes bank account, payment card details, and other details about payments to and from you.
• Technical and Usage Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website, and information about how you interact with and use our website, products and services.
• Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, any feedback and survey responses. Some Profile Data may also include Special Category Data.
• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
• Special Category Data: there may be occasions where we need to collect data surrounding special educational needs, learning difficulties, disabilities or health issues. This data is only kept for the length of your contract with VoicePower and is only used to fulfil and tailor our training services (training users on how to use our products and services).

We may also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals’ Technical and Usage Data to calculate the percentage of users accessing a specific website feature to analyse general trends in how users are interacting with our website to help improve the website and our service offering.

3. How is your personal data collected?

We use different methods to collect data from and about you including through:

• Your interactions with us. You may give us your personal data by filling in online forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you or an entity you are connected with:
  • purchase our products or services;
  • contact us by post, phone, email, social media, our online contact form, or any other method;
  • interact with us and provide information at exhibitions or events with us;
  • register for or attend an event with us;
  • create an account on our website;
  • sign up for a free trial;
  • subscribe to our services or publications;
  • register to enrol in a webinar with us;
  • send us a VAT exemption certificate;
  • request marketing to be sent to you;
  • enter a competition, promotion or survey;
  • give us feedback.
• Automated technologies or interactions. As you interact with our website, we will automatically collect Technical and Usage Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs, and other similar technologies. Please see our cookies section below in section 4 for further details. We use Cookiebot by Usercentrics to help us collect and manage cookies. You can find out more about Cookiebot and the way in which it handles data here: https://cookiebot.com.
• Third parties or publicly available sources. We will receive personal data about you from various third parties and public sources:
  • Technical and Usage Data is collected from Google Ads and Google Analytics.
  • Identity, Professional, or Contact Data may be collected from publicly available sources such as Companies House and social media platforms such as LinkedIn and YouTube.
  • Professional and Contact Data may be provided to us from our partners or suppliers including Microsoft, Philips, Olympus, Ordiginal, Phillips, Lexacom.
  • We may also receive Identity, Professional, and Contact Data from events or publications that we sponsor, as we may receive a list of attendees or members.
  • Payment and delivery services may provide us with data such as Contact, Financial and Transaction Data.
  • We may also receive data such as Identity, Contact, and Professional Data about you from our customers, for example where you are an employee of our customer and we liaise with you in the course of providing our services to our customer.

4. How we use your personal data

Legal basis

The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:

• Performance of a contract with you: Where we need to perform the contract we are about to enter into or have entered into with you, or to take steps linked to a contract. Examples include registering you for a service or subscription, providing and administering services and solutions to you as sought by you, and processing invoices and payments.
• Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud, to analyse and improve our services, managing customer relationships, and enabling us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
• Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to, for example to keep financial records and to account for VAT as required by HMRC. We will identify the relevant legal obligation when we rely on this legal basis.
• Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.

Purposes for which we will use your personal data

Purpose/Use	Legal basis	Type of data
To register you as a subscriber to our services, to provide our services to you, and to contact you in relation to your purchases such as software or licence upgrades. This also includes processing personal data to licence any software purchased under the End User Licence Agreement.	Performance of a contract with you.	Identity, Contact, Interaction, Profile Data.
To process your purchases and deliver your purchases including managing invoices and payments; and collecting money owed to us.	Performance of a contract with you; and Legitimate interests, to recover debts due to us.	Identity, Contact, Interaction, Financial and Transaction Data.
To respond to an enquiry about our products or services, or to deal with a complaint.	Performance of a contract with you, where we are about to enter into a contract, or taking steps linked to a contract; Legitimate interests, to manage our relationship with you.	Identity, Contact, Interaction, Profile Data. Financial and Transaction Data may also be relevant depending on the complaint.
To manage our relationship with you which will include notifying you about changes to our terms or privacy policy.	Performance of a contract with you Legitimate interests, to keep our records updated, and to keep our customers updated.	Identity, Contact, Interaction Data.
For our own financial administration and record keeping.	Legal obligation to comply with HMRC rules on accounting records. Legitimate interests, for business administration.	Identity, Contact, Financial and Transaction Data.
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	Legitimate interests, for running our business, provision of administration and IT services, network security, to prevent fraud, and to provide a functional website for customers and potential customers.	Technical and Usage Data.
To deliver relevant website content, our newsletters and online advertisements to you and measure or understand the effectiveness of the advertising we serve to you.	Legitimate interests, to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy.	Technical and Usage Data and Marketing and Communications Data.
To use data analytics to improve our website and customer relationships and experiences and to measure the effectiveness of our communications and marketing.	Legitimate interests, to keep our website and marketing updated and relevant, to develop our business and to inform our marketing strategy.	Technical and Usage Data and Marketing and Communications Data.
To send you relevant marketing communications and make personalised suggestions and recommendations to you about goods, services, events or webinars that may be of interest to you based on your Profile Data.	Legitimate interests, to carry out direct marketing, develop our products/services and grow our business. See below for how to opt out of marketing communications.	Technical and Usage Data and Marketing and Communications Data.
To carry out market research through your voluntary participation in surveys.	Your consent to participate in the surveys. Legitimate interests to study how customers use our products/services and to help us improve and develop our products and services.	Identity, Contact and Interaction Data.
To resolve legal or regulatory claims or disputes.	Legitimate interests (to fairly resolve disputes and claims that arise from time to time) or in some circumstances, Legal obligation, for example if legal holds apply, or if data processing or retention is requested by a public authority.	All types of personal data as required by the case.
Special Category Data. Under data protection law, some personal data is considered Special Category Data, including information relating to a person’s health. There may be occasions where we need to collect health data surrounding special educational needs, learning difficulties, disabilities or health issues. We may use Special Category health data to provide advice on or answer any enquiries about the suitability of our products and services for various health conditions, and also to create and provide user training on how to use the products and services.	Performance of contract with you. If you wish to receive advice and services from us tailored to specific health conditions, we may need to collect some Special Category Data in order to provide that advice and services. If you do not wish to provide Special Category Data, our advice and services may be generalised and not tailored to any health-related requirements. For special category data, we also rely on the separate condition for processing of explicit consent.	Special Category Data relating to a person’s health.

Direct marketing

You will receive marketing communications from us if you have requested information from us, made an enquiry with us, or purchased goods or services from us and you have not opted out of receiving the marketing.

We may also analyse your Identity, Contact, Technical and Usage and Profile Data to form a view which products, services and offers may be of interest to you so that we can then send you relevant marketing communications.

Third-party marketing

We will get your express consent before we share your personal data with any third party for their own direct marketing purposes.

Opting out of marketing

You can ask to stop sending you marketing communications at any time by following the opt-out links within any marketing communication sent to you or by contacting us using our details in section 1.

If you opt out of receiving marketing communications, you will still receive service-related communications that are essential for administrative or customer service purposes for example relating to order or purchase confirmations, restrictions on service or checking that your contact details are correct.

Cookies

Our website uses cookies to help you access our website, help speed up navigation, and provide you with custom tailored content.

You can allow or deny cookies other than Necessary cookies using the cookies declaration on our website. We use Cookiebot by Usercentrics to manage the cookies for our website. The Cookiebot service includes a cookie which is placed on your device. As a reminder you can see the Cookiebot privacy policy here Privacy Policy – Your CMP Partner – Cookiebot™.

The cookies on our website may also include cookies in connection with Google Analytics. We explain more about Google’s data handling in section 5.

The cookies on our website may also include cookies in connection with Lift, also known as Salesloft. You can find out more about Lift and see its privacy policy here Privacy Policies.

We also use cookies in connection with WordPress which we use to help us put our website together. You can find out more about WordPress and see its privacy policy here Privacy – WordPress.org English (UK).

Analytics

We use third-party analytics services such as Google Analytics to understand how users interact with our website and dashboard. These tools may collect anonymized usage data, device information, and interaction events. This helps us improve the product and fix issues.

AI and automated decision making

We may use AI tools such as Microsoft Copilot to assist with business functions and to help us provide our services. Whilst we will seek to avoid inputting personal data into such tools where possible, there may be circumstances where this is necessary in order to support the provision of our services. In such cases, we will exercise reasonable discretion and apply such protections and safeguards as we consider appropriate, taking into account the nature of the personal data involved and the purpose for which it is processed.

Although we may use AI tools to assist with our business and the provision of our services, we do not make decisions concerning individuals based solely on automated processing, including profiling, that produce legal or similarly significant effects.

5. Third-party links and services

Our website may include links to and from third-party websites, plug-ins and applications, such as but not limited to partner networks, affiliates, social media platforms and search engines. We are not responsible for the privacy practices or the content of those websites. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

• Google and YouTube: Our website uses analytical data provided by Google Analytics and collected by them from the website. We may also use other Google services such as Google Ads. We also have a social media presence on YouTube, a subsidiary of Google. Google is based in Mountain View, California, United States. Google may aggregate data it collects from its various services including Google Analytics, Google Translate, Google Maps and YouTube. It may do this to enrich the data it sells to advertisers including through its DoubleClick subsidiary. You can find out more about the types of analytical data and how that data is processed by visiting https://google.com. Using Google Analytics to gather statistics on site usage may involve the use of cookies—there are more details on this in Google’s own privacy policy. You acknowledge and accept that we have no control over Google’s data processing—please refer to Google’s privacy policy for details of their data processing practices. Google’s privacy policy can be found here: https://google.com.
• LinkedIn: We have a social media presence on LinkedIn. You can visit the LinkedIn website for details of their privacy policy: https://linkedin.com. Be aware of the fact that social media companies may aggregate data you share with them with other data they hold including data from cookies, from searches and website activity and from people you associate with online. They may also use this data to send you targeted adverts. LinkedIn is owned by Microsoft – so please read carefully the information we provide about Microsoft below.
• Microsoft: We use various Microsoft services including Teams, Outlook, and Microsoft cloud storage services. We also use Microsoft Copilot which includes some AI functionality. Microsoft is based in Redmond, Washington, United States. LinkedIn is owned by Microsoft and there may be additional data sharing between LinkedIn and Microsoft as a result. Microsoft may aggregate data with data it collects from other sources including Bing. It may do this to enrich the data it sells to advertisers including through Microsoft’s subsidiary Xandr. Microsoft’s Privacy Statement is here: https://microsoft.com. You acknowledge and accept that we have no control over Microsoft’s data processing.

As mentioned above, some data may be provided to us from our partners or suppliers including Microsoft, Philips, Olympus, and Ordiginal. It is also important to remember that VoicePower sells services provided by third parties. They will have their own privacy policies and terms and conditions which apply to their services and you should review those terms too. Some of the products and services offered by suppliers such as Dragon, Philips SpeechLive and Caption.Ed also include AI services. You acknowledge and accept that we have no control over the data processing of these partners and suppliers.

• Philips: we sell products and services by Philips, and we may also receive personal data from Philips from time to time. The privacy policy for Philips Speech Live can be found here: https://speechlive.com, and the privacy policy for Philips Dictation (also known as Philips Speech Processing Solutions) can be found here: https://philips.com.
• Dragon and Nuance: Dragon speech products and services, such as Dragon Medical One and Dragon Professional are developed by Nuance Communications Inc, which is owned by Microsoft. You can find Microsoft’s privacy policies linked above, and you can find Nuance Communications’ privacy policy here: https://nuance.com.
• TalkType and Caption.Ed: TalkType and Caption.Ed are dictation and notetaking software products provided by CareScribe Ltd, a company based in England. Their privacy policy is here: https://carescribe.io.
• Olympus Audio: Olympus Audio is a part of OM System, is a technology company headquartered in Japan. Their privacy policy for Europe can be found here: https://omsystem.com.
• Ordiginal: Also known as ORdigiNAL, is a speech solutions company headquartered in the Netherlands. Their privacy policy can be found here: https://ordiginal.com.
• Lexacom: Lexacom is a digital dictation software, by Aprobrium Limited, a company registered in England and Wales. Their privacy policy can be found here: https://lexacom.co.uk.
• Mindview Mind Mapping: this software is made by MatchWare, a software company headquartered in Denmark. Their privacy policy can be found here: https://matchware.com.
• Zoomtext: Zoomtext Software is by Freedom Scientific and Vispero. Vispero is a global assistive technology company with headquarters in Florida US, and the Netherlands. Their privacy policy can be found here: https://vispero.com.

6. Disclosures of your personal data

We will share your personal data with our suppliers and manufacturers of products where the data is required for End User Licence Agreements.

We may share limited data with trusted service providers necessary to operate the service, such as website hosting providers, analytics tools, and payment processors. These providers are only allowed to use that data to provide their service to us.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes, in accordance with our instructions, and in compliance with applicable data protection laws.

• TeamViewer: We use TeamViewer for remote support services. TeamViewer Germany GmbH is based in Germany. Their privacy notice can be found here: https://teamviewer.com. You acknowledge and accept that we have no control over TeamViewer’s data processing.
• Codeias: Our website is maintained by Codeias Limited, a company registered in England. They help is with hosting and support services. You can find out more about them or contact them here: https://codeias.com.
• Peregrine Software: our e-learning portal is maintained by Peregrine Software Limited, a company based in the UK. Their privacy policy can be found here: https://peregrinesoftware.co.uk.
• Xero: We use Xero software for accounting and invoicing. Xero is a global online platform with headquarters in New Zealand, their UK privacy policy can be found here: https://xero.com.
• Blue Wren: We use Blue Wren’s Flight platform for our customer relationship management system. Blue Wren Limited is registered in England, and their privacy policy can be found here: https://bluewren.co.uk.

Where you have asked us to deliver products to you, we will share your delivery address and contact details with our delivery partners, and those delivery partners may contact you regarding your delivery.

• JGBM: We use JGBM Ltd, a company registered in England, to handle our deliveries. Their privacy policy can be found here: https://jgbm.co.uk. They might have their own delivery partners that they work with.

Additionally, we may share your personal data with an organisation, medical practice or surgery that you practice with if you have in the past indicated that you agree to share your personal data with that organisation, practice or surgery, for example if you have CCed them in communications with us or requested them to act as your agent with us. Unless instructed otherwise by you in writing, we shall be entitled to assume that we can disclose your personal data to them.

We also reserve the right to share or transfer your personal data in connection with a business transition or business re-organisation (such as a merger, acquisition by another company, or a sale of all of or portion of our assets). In these circumstances, we might also need to transfer personal data to a relevant third party as part of a due diligence or conflict check process in a business transition. For example, we may need to share your personal data with a prospective buyer and external professional advisors such as accountants, insurers, lawyers or financial institutions.

If we sell our business, or part of it, we may share your information with a buyer. They may not be in the same line of business as we are. We will ask any buyer to respect this privacy policy. Likewise, your personal information may be passed on to a successor in interests in the unlikely event of a liquidation, bankruptcy or administration.

7. International transfers

As some of our service providers are located in countries outside of the UK or the EEA, it may be necessary for the personal data that we collect from you to be transferred to or accessed from outside the UK or the EEA in order for you to use the features on our website, for example to the US.

Where we transfer your personal information to countries deemed to provide an acceptable level of data protection by the UK Information Commissioner, we rely on that decision to transfer your personal information. For transfers to the US, we may rely on the UK Extension to the EU-US Data Privacy Framework (the DPF), which allows UK organisations to make restricted transfers to certain self-certified businesses based in the US. As of October 2026, Microsoft Corporation (which also covers Nuance Communications Inc), Google LLC, and LinkedIn Corporation are all active participants in the DPF. The full DPF list is here: https://dataprivacyframework.gov.

We can give no guarantees that the DPF is a safe method of transferring data. The European Court of Justice previously annulled similar schemes including Safe Harbor and Privacy Shield. It would be open to a court to determine that DPF no longer provides a safe way of transferring data to the US. If that were to happen, we would try and establish a different method for legitimising data transfer to the US although we cannot guarantee that those efforts would be successful, nor can we give an indication of how long that would take.

For transfers to service providers outside the UK or the EEA where no adequacy decision applies, we use International Data Transfer Agreements, Standard Contractual Clauses or other transfer tools provided for in the applicable data protection legislation to protect your personal information.

If you would like further information about a data transfer mechanism we use for a data transfer of your personal data, please get in touch with us using the contact details provided in section 1.

8. Data security

We have put in place what we consider to be appropriate security measures which are designed to reduce the risk of your personal data being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we put measures in place which are designed to limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. We ask them to only process your personal data on our instructions and subject to a duty of confidentiality.

We have put in place procedures which are designed to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Note that, despite the measures taken by us and the third parties we engage, the internet is not secure. As a result, others may nevertheless unlawfully intercept or access private transmissions of data.

In addition, it remains your responsibility where you have an account or portal login with us to log off or exit from the site or portal when not using it and keep your password or other access information secret. Your password and log in details are personal to you and should not be given to anyone else or used to provide shared access, for example over a network. You should use a password which is unique to your use of the portal or site – do not use the same password as you use for another site or email account. It is also your responsibility to maintain good internet security. For example, if your email account is compromised this could allow access to your account or portal with us if you have given us those details and/or permitted access through those accounts. If your email account is compromised it could be used to ask us to reset a password and gain access to your account or portal with us. You should keep all of your account details secure. If you think that any of your accounts has been compromised you should change your account credentials or portal login with us, and in particular make sure any compromised account does not allow access to your account with us. You should also tell us as soon as you can so that we can try to help you keep your account secure and if necessary, warn anyone else who could be affected.

9. Data retention

How long will you use my personal data for?

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect of our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. We will also consider the length of any warranty or product support you may have with us if you have purchased hardware or software from us.

By law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes, and in accordance with the limitation periods under English law.

In some circumstances you can ask us to delete your data: see section 10 below for further information.

10. Your legal rights

You may have a number of rights under data protection laws in relation to your personal data.

You may have the following rights:

• To request access to your personal data (commonly known as a “subject access request”). This enables you to obtain a copy of the personal data we hold about you, following a reasonable and proportionate search by us, and to confirm that we are processing it lawfully. Please note that there are some exceptions to this right, so in some circumstances access may be denied, for example when if disclosing the information would reveal personal data about other people. If the subject access right does apply, we will conduct a reasonable and proportionate search to respond to your request – you might be able to access some but not all of the personal data requested.
• To request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• To request erasure of your personal data in some circumstances. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You may also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
• To object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data (including carrying out profiling based on our legitimate interests). In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object.
• You may also have the absolute right to object any time to the processing of your personal data for direct marketing purposes (see section 4 for details of how to object to receiving direct marketing communications).
• To request the transfer of your personal data to you or to a third party. If we agree to this request we will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• To request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in one of the following scenarios:
  • If you want us to establish the data’s accuracy;
  • Where our use of the data is unlawful, but you do not want us to erase it;
  • Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
  • You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

You can find out more about these rights by reading the UK GDPR, which can be viewed here: https://legislation.gov.uk.

If you wish to exercise any of the rights set out above, please contact Vicky Humberstone using the contact details set out in section 1 above.

No fee usually required

You will usually not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and consider your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

11. Complaints

We hope that you won’t ever need to, but if you wish to make a complaint about the way we process your personal data or think that we have not complied with your rights, you can get in touch with us.

You also have the right to make a complaint to the Information Commission (also known as the ICO), the UK regulator for data protection issues (www.ico.org.uk). However, before doing so please make sure you have first made your complaint to us or asked us for clarification if there is something you do not understand. The ICO will expect you to have done this before reviewing your complaint. To make a complaint, please contact Vicky Humberstone using our contact information in section 1.

12. Changes to the privacy policy and your duty to inform us of changes

We keep our privacy policy under regular review. If we change our privacy policy we will post the changes on our website. Please check our website frequently to see any updates or changes to our privacy policy. If you’d like a permanent copy of this privacy policy kindly print a copy for your records. Do check back for the latest version of our privacy policy when submitting personal data to us.

It is important that the personal data we hold about you is accurate and current. We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to us. Please keep us informed if your personal data changes during your relationship with us, for example a new address or email address.