Privacy Policy for Radical IT Ltd Website

Last Updated: 4 June 2025

1. Introduction

Welcome to Radical IT Ltd ("we", "us", "our"). We are a small software consultancy committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect personal data obtained through your use of our website (www.radicalit.co.uk).

This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and other applicable UK data protection legislation.

By using our website, you acknowledge that you have read and understood this privacy policy.

2. Who We Are (Data Controller)

Radical IT Ltd is the controller responsible for your personal data.

• Company Name: Radical IT Ltd
• Registered Address: Abacus House 14-18, Forest Road, Loughton, Essex, IG10 1DX
• Company Number: 05454856
• Contact Email for Data Protection Enquiries: info@radicalit.co.uk
• Website: https://radicalit.co.uk

3. What Information We Collect About You

We may collect and process the following data about you:

• Information you give us:
  • If you contact us via a contact form or email, we may collect your name, email address, phone number, company name, and the content of your message.
• Information we collect automatically (Cookies and Google Analytics):
  • When you visit our website, we use Google Analytics to collect information about your Browse activity. This includes:
    • Your IP address (which may be anonymised by Google Analytics)
    • The type of browser and operating system you use
    • The date and time of your visit
    • The pages you visited on our site
    • The referring website (if you came to our site from another website)
    • General geographic location (e.g., city, country)
  • This information is collected through cookies and similar tracking technologies. For more details, please see Section 6 (Cookies and Tracking Technologies).

4. How We Use Your Information

We use the information we collect in the following ways:

• To provide and improve our website: We use Google Analytics data to understand how visitors use our website, what content is popular, and to identify areas for improvement. This helps us enhance the user experience.
• To respond to your enquiries: If you contact us, we will use your information to respond to your questions, provide information, or address your concerns.
• To maintain website security: We may use technical data, including IP addresses, to help maintain the security and integrity of our website.
• To comply with legal obligations: We may process your data where necessary to comply with our legal or regulatory obligations.

5. Lawful Basis for Processing Your Personal Data

Under UK GDPR, we must have a lawful basis for processing your personal data. The lawful bases we rely on are:

• Consent: For the use of non-essential cookies, including those used by Google Analytics for tracking and analytics purposes, we rely on your explicit consent. You can withdraw your consent at any time (see Section 6 and 9).
• Legitimate Interests:
  • For responding to your direct enquiries (e.g., via email or a contact form), we process your data based on our legitimate interest in communicating with potential and existing clients and business partners.
  • For maintaining the security of our website and understanding general website usage trends (using aggregated and anonymised data where possible) to improve our services. We ensure that our legitimate interests do not override your rights and freedoms.
• Legal Obligation: We may process your data if necessary to comply with a legal or regulatory obligation.

6. Cookies and Tracking Technologies (Google Analytics)

Our website uses cookies. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.

We use the following types of cookies:

• Strictly Necessary Cookies: These are cookies that are required for the operation of our website. They include, for example, cookies that enable basic functions like page navigation.
• Analytical/Performance Cookies (Google Analytics): These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
  • We use Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses cookies to help us analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers that may be located outside the UK/EEA (typically in the United States).
  • Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for us, and providing other services relating to website activity and internet usage.
  • Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
  • You can find out more about Google's privacy policy here: https://policies.google.com/privacy.
  • To opt out of being tracked by Google Analytics across all websites, you can visit: http://tools.google.com/dlpage/gaoptout.

Your Consent for Cookies:

When you first visit our website, we will ask for your consent to place non-essential cookies (including Google Analytics cookies) on your device. You can manage your cookie preferences at any time through our cookie consent banner/tool or by adjusting your browser settings. Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org.

Please note that if you block all cookies (including essential cookies) you may not be able to access all or parts of our site.

7. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information with third parties for their marketing purposes.

We may share your personal data with:

• Service Providers:
  • Google Analytics: As described above, to help us analyse website usage.
  • We may also use other third-party service providers for hosting, IT support, and security. These providers will only process your data on our behalf and under our instructions.
• Legal and Regulatory Authorities: If required by law or in response to valid legal processes, such as a court order or government request.
• Professional Advisors: Such as lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services, where necessary in the course of the professional services that they provide to us.
• In the event of a business transfer: If Radical IT Ltd is involved in a merger, acquisition, or sale of all or a portion of its assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal data, as well as any choices you may have regarding your personal data.

8. International Data Transfers

Information collected by Google Analytics may be transferred to and stored on servers located outside the United Kingdom (UK) or the European Economic Area (EEA), primarily in the United States. Google adheres to data protection frameworks like the EU-U.S. Data Privacy Framework (and the UK Extension to the EU-U.S. DPF) which provide safeguards for such transfers.

When we transfer your personal data out of the UK/EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK authorities.
• Where we use certain service providers, we may use specific contracts approved by the UK authorities which give personal data the same protection it has in the UK (e.g., International Data Transfer Agreements or Addendums).

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK/EEA.

9. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

• Data from contact forms or emails will be retained for as long as necessary to deal with your enquiry and for a reasonable period thereafter for record-keeping purposes, typically up to 2 years after our last interaction.
• Google Analytics data is subject to Google's data retention policies. We have configured our Google Analytics data retention period to 14 months. After this period, user-level and event-level data stored by Google Analytics is automatically deleted from Analytics’ servers. Aggregated data may be retained for longer.

We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

10. Your Data Protection Rights under UK GDPR

Under UK data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal information.
• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances (e.g., where we are relying on legitimate interests).
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
• Your right to withdraw consent - Where we rely on your consent to process your personal data (e.g., for non-essential cookies), you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at info@radicalit.co.uk if you wish to make a request.

11. Security of Your Data

We are committed to ensuring that your information is secure. We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. These measures include [mention any specific measures if appropriate, e.g., SSL encryption for the website, access controls, staff training].

However, please note that no method of transmission over the internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

12. Links to Other Websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

13. Children's Privacy

Our website is not intended for children under the age of 13 (or a higher age threshold if applicable in your specific context, e.g., 16 in some cases under GDPR unless member state law provides for a lower age). We do not knowingly collect personal data from children. If you are a parent or guardian and believe we may have collected information about a child, please contact us at info@radicalit.co.uk so we can delete the information.

14. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date at the top of this policy. We encourage you to review this privacy policy periodically for any changes.

15. How to Contact Us and Complaints

If you have any questions about this privacy policy or our data protection practices, or if you wish to exercise any of your rights, please contact us:

• By email: info@radicalit.co.uk
• By post: Radical IT Ltd, Abacus House 14-18, Forest Road, Loughton, Essex, IG10 1DX

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. Their contact details are:

• Information Commissioner's Office
• Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Helpline number: 0303 123 1113
• Website: https://www.ico.org.uk

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.