Privacy Policy

Who I am

I am a Sole Trader trading as Grace Anne Lowe and my website address is: https://loweresearch.co.uk. The website has been made using WordPress and is hosted by IONOS UK.

Contact form

Your email is processed using the Contact Form 7 plugin. I do not store your email on the website using other plugins. A message is generated by the plugin and sent directly to my inbox. I will not pass your email onto third parties and I will only use it to contact you about the services requested. If someone else uses your email address in the form, please let me know and I will delete it.

The legal basis for processing your personal data is your consent and/or the necessity to perform a contract for services.

I use the v3 Google reCaptcha integration during form submission to prevent spam. To understand how they use your data please view the reCaptcha privacy policy.

Cookies

This website uses standard cookies that are part of the WordPress platform to enhance your user experience. These include cookies that remember login preferences, screen display settings, and site interaction history such as commenting or editing content.

For a full description of the cookies used, please see my Cookie Policy.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who I share your data with

If I enable commenting and you request a password reset, your IP address will be included in the reset email.

I will not directly share your information with third parties and all cookies will be managed by WordPress plugins.

How long I retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so I can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on my website (if any), I also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). I, as the website administrator, can also see and edit that information.

Client and contact data

As part of my services, I store names and affiliations of clients and contacts in Google Workspace. Each client or contact is assigned a unique reference which I use to identify any associated meeting notes. Client details and meeting notes are kept separately to ensure privacy and security. Email addresses are retained within Gmail only and are not transferred to other systems or platforms. I do not share this information with any third parties unless required to do so under UK law.

Some of the services I use, such as Google Workspace, may store or process data outside the UK. These providers comply with UK GDPR through appropriate safeguards, including Standard Contractual Clauses (SCCs).

The legal basis for processing this information is the necessity to perform a contract and/or legitimate interest in managing professional relationships.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data I hold about you, including any data you have provided to me. Clients and contacts may also request access to or deletion of their personal data as outlined in UK GDPR. You can also request that I erase any personal data I hold about you. This does not include any data I am obliged to keep for administrative, legal, or security purposes.

To exercise any of these rights, please contact me at grace@loweresearch.com. I may request verification of your identity before processing your request. I will respond within one calendar month in accordance with UK GDPR.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

Your email and other information that you enter into the contact form is sent directly to my email address and you can request me to delete it at any time.

Intellectual property and service-related data

As specified in project contracts, any meeting notes, intellectual property (IP), and data collected in the course of delivering my services are deleted after the project is completed or terminated, but only once all information has been transferred to the owner. Ownership of IP and data is defined and governed by customer-specific contracts.

To enhance efficiency and productivity, I use ChatGPT (OpenAI) for assistance during project delivery. I maintain a Business membership, which ensures that any content I input into ChatGPT is not used for training purposes and remains secure. I do not input any personally identifiable information into ChatGPT. Only anonymised or general information is used to support productivity.