Privacy Policy | GoldWhite

This policy explains how GoldWhite Ltd ("GoldWhite", "we", "us") handles personal data collected through goldwhite.co.uk. GoldWhite Ltd is registered in England and Wales under company number 13551456 and is the data controller for this data.

If you have any question about this policy or your data, email info@goldwhite.co.uk.

What we collect

Enquiries. When you use our contact form we collect your name, email address, and anything else you choose to tell us, such as your company, its stage, how you heard about us and a description of what you are working on.
Call bookings. When you book a call through Calendly, Calendly collects your name, email address, the time you choose and any answers you give on the booking form, and shares them with us.
Newsletter sign-ups. If you subscribe to our insights, we collect your email address.
Emails. If you email us, we hold the correspondence.
Analytics. Only if you click "Accept All" on our cookie banner, Google Analytics collects information about how you use the site, such as pages viewed, approximate location, device and browser type, and how you arrived. We do not use this to identify you personally.

Why we use it, and our lawful basis

To reply to your enquiry and arrange and hold calls. Lawful basis: our legitimate interest in responding to people who contact us, and taking steps at your request before entering into a contract.
To send you our insights if you have subscribed. Lawful basis: your consent. Every email lets you unsubscribe, or you can email us.
To understand how the site is used and improve it. Lawful basis: your consent, given through the cookie banner.
To keep records we are legally required to keep if you become a client. Lawful basis: legal obligation and contract.

We do not sell your data and we do not use it for automated decision-making.

Who we share it with

We use a small number of service providers who process data on our behalf, under contract:

Formspree receives contact form and newsletter submissions and forwards them to us.
Calendly handles call scheduling.
Google provides Google Analytics (only with your consent).
Vercel hosts this website and processes standard server logs such as IP addresses.
Zoho provides our email, hosted in its EU data centre.

Some of these providers are based in, or process data in, the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, as applicable to each provider.

How long we keep it

Enquiries and call bookings that do not lead to an engagement: up to 24 months from our last contact, then deleted.
Newsletter addresses: until you unsubscribe.
Client records: for as long as the engagement lasts and for up to seven years afterwards, to meet legal, tax and accounting requirements.
Google Analytics data: 14 months.

Cookies and similar technologies

We store one essential item in your browser, gw_cookie_consent, which remembers your cookie choice. It contains no personal data.

If you click "Accept All", Google Analytics sets cookies named _ga and _ga_<ID>, which last up to two years. If you click "Essential Only", Google Analytics is never loaded.

You can change your choice at any time:

Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To exercise any of these rights, email info@goldwhite.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to resolve your concern first.

Changes to this policy

We may update this policy when our services or the law change. The date at the top of this page shows when it was last revised.