Astut Privacy Policy

Who we are

This website is operated by Astut. Our website address is:https://astut.co.uk. You can contact us atinfo@astut.co.uk.

What information we collect, use and why

This website has no user accounts and no forms. We collect personal information in two ways:

• If you contact us by email, we receive your name, email address and the contents of your message. We use this information to respond to your enquiry.
• We collect usage data about visits to this website through Google Analytics: the pages you view, how you arrived at the site, your approximate location (at city level), and the type of device and browser you use. We use this information to understand how the website is used and to improve it.

Analytics and cookies

This website uses Google Analytics 4, a service provided by Google. It sets cookies (named_ga and _ga_*) that distinguish your browser from other visitors so that repeat visits can be counted as such. These cookies last up to two years. They are used only for analytics; we do not use advertising cookies and we do not show ads.

Google processes this data on our behalf. Google Analytics 4 does not log or store your IP address. You can read about how Google uses data from sites that use its services atpolicies.google.com/technologies/partner-sites.

You can turn analytics off for this website at any time, free of charge, using the “Turn off analytics” control in the footer of every page. Your choice is stored in your browser and applies until you reverse it there. You can also opt out of Google Analytics across all websites with theGoogle Analytics opt-out browser add-on.

Who we share your data with

We share usage data with Google as described above, and email you send us passes through our email service provider. Your personal data is not passed to any other third party, and we do not sell it.

How long we retain your data

Email correspondence is retained for as long as it is needed to deal with your enquiry and any relationship that follows from it. Visitor-level analytics data is retained in Google Analytics for at most 14 months; aggregate statistics (such as page view counts) are retained beyond that.

What rights you have over your data

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. You can find more details on the Information Commission's Office (ICO) website where there is a list of possible lawful bases in the UK GDPR. The lawful basis we rely on may affect your data protection rights which are set out in brief below:

• Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
• Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
• Your right to erasure – You have the right to ask us to delete your personal information. Read more about the right to erasure.
• Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
• Your right to object to processing – You have the right to object to the processing of your personal data. Read more about the right to object to processing.
• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us clearly stating it is a “Data Protection Rights Request”