Privacy Policy

Thank you for visiting our website. This Privacy Policy explains how we collect, use, and protect your personal information when you interact with us online. We are committed to respecting your privacy and complying with data protection laws.

1. Who We Are

This website is operated by Rose Tinsley Consulting Limited, a GIS consultancy based in Essex. If you have any questions about this policy or your data, you can contact us at:

Email: hello@rosetinsleyconsulting.com

Address: 22 Clover Avenue, Colchester, CO5 9GF

2. Information We Collect

2.1 - Analytics

This website collects personal data to power our site analytics, including:

Information about your browser, network, and device
Web pages you visited prior to coming to this website
Your IP address

This information may also include details about your use of this website, including:

Clicks
Internal links
Pages visited
Scrolling
Searches
Timestamps

We share this information with Odoo, our website analytics provider, to learn about site traffic and activity.

2.2 – Cookies

By enabling Odoo’s cookies bar feature, the platform automatically generates a Cookie Policy page at /cookie-policy, which contains a list of cookies, their purposes, and examples.

These necessary and required cookies are always used, which allow Odoo, our hosting platform, to securely serve this website to you.

These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.

You can manage your cookie preferences at any time by editing your preferences in your browser.

2.3 – Form Block Submissions

When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We share this information with Odoo, our online store hosting provider, so that they can provide website services to us. We also share this information with Microsoft Outlook for storage and response.

When you complete our contact form, some fields are required (*), such as your name and email address. Without this information, we may be unable to respond to your enquiry. Providing additional information is optional and entirely at your discretion.

2.4 – Visitor Data

This website is hosted by Odoo. Odoo collects personal data when you visit this website, including:

Information about your browser, network and device
Web pages you visited prior to coming to this website
Web pages you view while on this website
Your IP address

Odoo needs the data to run this website, and to protect and improve its platform and services. Odoo analyses the data in a de-personalized form.

2.5 – Fonts

This website serves font files from and renders fonts using Google Fonts and Adobe Fonts. To properly display this site to you, these third parties may receive personal information about you, including:

Information about your browser, network, or device
Information about this site and the page you’re viewing on it
Your IP address

These third-party services operate independently and may process your data according to their own privacy policies. You can read more here:

2.6 – Who We Share your Data With

We use trusted third-party service providers to help operate our website and manage communications. These parties only access your data to perform specific tasks on our behalf and are obligated to protect it.

Processor	Purpose	Location	Privacy Policy
Odoo	Website hosting, form collection	US/EU (data may be transferred internationally)	https://www.odoo.com/privacy
Microsoft Outlook	Email delivery and correspondence	UK/EU/US	https://privacy.microsoft.com

3. How We Use Your Information

We use the information you provide to:

Respond to your enquiries
Provide information about our services
Improve our customer service and website functionality
Maintain internal records for administrative purposes

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on individuals.

4. Legal Basis for Processing

We process your personal data under the following lawful bases, as permitted by Article 6 of the UK GDPR:

Processing Purpose	Legal Basis
Responding to enquiries submitted via our contact form	Consent (Article 6(1)(a))
Maintaining business records and ensuring website functionality	Legitimate Interests (Article 6(1)(f))
Analytics and non-essential cookies	Consent (Article 6(1)(a))

You have the right to withdraw your consent at any time. To do so, please contact us using the details provided above.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal obligations.

Data Type	Retention Period
Contact form submissions	Up to 2 years from last contact
Email correspondence	2 years, unless legally required to retain longer
Analytics data	26 months (via third-party tools)

You can request deletion of your data at any time (see “Your Rights”).

6. Data Storage and Security

Our website is hosted on Odoo, which provides a secure infrastructure. Squarespace stores your data on secure servers behind a firewall and implements industry-standard encryption and security measures.

We take appropriate steps to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

7. Your Rights

You have the following rights regarding your personal data:

Right of access – Request a copy of the personal data we hold about you.
Right to rectification – Request correction of any incomplete or inaccurate data.
Right to erasure – Request deletion of your data (the “right to be forgotten”).
Right to restrict processing – Ask us to limit the use of your data.
Right to object – Object to our use of your data where we rely on legitimate interests.
Right to data portability – Request to receive your data in a structured, commonly used format.
Right to withdraw consent – Withdraw your consent at any time.

We aim to respond to all valid requests within one month. To exercise any of these rights, please contact us at hello@rosetinsleyconsulting.com.

8. Complaints and Regulatory Contact

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue.

If you're not satisfied with our response, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk
Phone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The most recent version will always be posted on this page with an updated effective date.

10. Data Breaches

In the unlikely event of a personal data breach, we will notify the UK Information Commissioner’s Office within 72 hours where required and inform affected individuals without undue delay if the breach is likely to result in a high risk to their rights and freedoms.

11. Children’s Privacy

This website is not intended for use by children under the age of 16, and we do not knowingly collect personal data from anyone under this age. If you believe we have collected data from a minor, please contact us immediately.

12. Contact Us

If you have any questions or concerns about this policy or how we handle your data, please contact:

Email: hello@rosetinsleyconsulting.com

Address: 22 Clover Avenue, Colchester, CO5 9GF

If you're based in the UK or EU and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

13. Version Control

This policy is owned and reviewed annually by the Director.

Version	Date	Reviewed	Next Review
1.0	09/05/2025	NP	EP