Privacy Policy

Last Updated: June 7, 2026

1. Introduction

violet-marsh operates the website violet-marsh.com and is committed to protecting the privacy of individuals who visit our website and use our services. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.

2. Information We Collect

We collect the following types of personal information:

• Contact Information: Name, email address, and correspondence details when you submit inquiries through our contact forms.
• Service Selection Data: Information about which services you are interested in and details you provide about your organisation's energy challenges.
• Technical Data: IP address, browser type, operating system, and website usage data collected through cookies and analytics tools.
• Communication Records: Records of email and other correspondence between you and our team.

3. How We Use Your Information

We use your personal information for the following purposes:

• Responding to your inquiries and providing information about our services
• Delivering consulting services you have requested or contracted
• Improving our website functionality and user experience
• Complying with legal obligations and regulatory requirements
• Sending occasional updates about our services (only with your consent)

4. Legal Basis for Processing

We process your personal data under the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: When processing is necessary to fulfil our contractual obligations
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal Obligation: When processing is required to comply with applicable laws

5. Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information with:

• Service providers who assist with website hosting, email delivery, and data analytics (under strict confidentiality agreements)
• Professional advisors such as legal counsel or accountants when necessary
• Regulatory authorities or law enforcement when legally required

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Contact inquiry data is typically retained for three years from the date of last contact. Client project data is retained for seven years in accordance with professional services standards.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restriction: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw previously given consent at any time

8. International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by regulatory authorities.

9. Security Measures

We implement technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse. These include encrypted data transmission, secure server infrastructure, access controls, and regular security assessments.

10. Cookies and Tracking

Our website uses cookies to enhance functionality and analyse usage patterns. You can control cookie settings through our cookie banner or your browser preferences. For detailed information, please refer to our Cookies Policy.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any external websites you visit.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected such data, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this policy regularly.

14. Contact Information

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

violet-marsh
12 Albemarle Gardens
London SW19 4PN
United Kingdom
Email: [email protected]

15. Supervisory Authority

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit ico.org.uk for more information.