Privacy & Cookie Policy.

Ventora Digital respects your privacy. This Privacy & Cookie Policy explains how personal information is collected, used, stored, shared and protected when you visit our website, contact us or engage with our business.

This policy is intended to explain our practices under applicable UK data protection legislation, including the UK GDPR and Data Protection Act 2018, and relevant electronic communications rules. Other laws may apply depending on your location.

Ventora Digital is a company registered in the United Kingdom under Company Registration Number 17474894. We generally act as a data controller for information collected through our website and business enquiries. For certain client projects we may instead act as a data processor under the client's documented instructions.

This policy applies to visitors, prospective clients, business contacts and other individuals whose information we process in connection with our website and business communications.

Separate contractual privacy or data processing terms may apply when we provide services to a client.

Depending on your interaction with us, we may process the following categories of information.

• Contact information such as name, email address, telephone number, business name and job title.
• Enquiry and project details such as requested services, budget, timeline, requirements and correspondence.
• Technical information such as IP address, device and browser information, pages requested, timestamps and security logs.
• Cookie preferences and, where permitted, analytics or similar technology identifiers.
• Contractual, billing or transaction records where relevant to an engagement.

We collect information directly when you submit forms or contact us, automatically through necessary website infrastructure, and where appropriate from lawful business communications or publicly available business sources.

Please avoid sending sensitive personal information unless it is necessary and we have agreed on a suitable secure method.

We process information only where an appropriate lawful basis applies. The basis depends on the specific purpose and circumstances.

• Responding to enquiries and preparing requested proposals: legitimate interests or steps taken at your request before a contract.
• Providing services and managing client relationships: contractual necessity or legitimate interests, as applicable.
• Maintaining security, diagnosing errors and preventing abuse: legitimate interests and, where relevant, legal obligations.
• Accounting, tax, regulatory compliance and legal claims: legal obligations or legitimate interests, as applicable.
• Optional analytics, advertising technologies or electronic marketing: consent where required by law; otherwise another applicable lawful basis.

We aim to process personal information lawfully, fairly and transparently, for specified purposes, using only information that is relevant and necessary. We take reasonable steps to maintain accuracy, limit retention and safeguard information.

Our website may use strictly necessary cookies or local storage for functionality, security and remembering consent choices. Optional analytics or marketing technologies, if enabled, should be subject to the consent requirements that apply to them.

Cookie categories, providers and durations depend on the technologies actually deployed. We do not assume all cookies have the same lifetime.

Where required, non-essential cookies and similar technologies should remain disabled until you provide valid consent. You may reject optional technologies without losing access to core website content.

You can use the website's Cookie Settings control, where available, to review or change your choices. You may also manage cookies through your browser. Withdrawing consent does not invalidate processing performed before withdrawal.

IP addresses and related technical data may be processed to deliver pages, protect the website, investigate suspicious activity and resolve technical issues. IP addresses may constitute personal data and are treated accordingly.

Retention of technical logs depends on security needs, hosting configuration and applicable legal requirements.

We may disclose relevant information to authorised staff, contractors, professional advisers, service providers or competent authorities where there is a lawful reason to do so.

We do not sell personal information to third parties. We require appropriate confidentiality and data protection safeguards when service providers process information on our behalf.

Depending on our active website and business configuration, providers may support hosting, infrastructure, website security, communications, analytics, customer management or payment administration.

The providers actually used and their processing arrangements should be reviewed as our technology changes. Links to external services are governed by their own privacy notices.

Information may be processed outside the United Kingdom when we use international technology providers or work with overseas clients. Where restricted transfers occur, we will apply an appropriate lawful transfer mechanism, such as adequacy regulations or relevant contractual safeguards, together with supplementary measures where necessary.

We retain personal information only for as long as reasonably necessary for the purpose collected, including service delivery, enquiries, security, recordkeeping and legal obligations.

Retention periods vary by record type. For example, enquiry records may be deleted when no longer needed, while contracts and accounting records may be kept longer where required by law or to establish, exercise or defend legal claims. Cookie durations depend on the specific technology and consent configuration.

When information is no longer required, we aim to delete it securely or anonymise it where appropriate.

We use reasonable technical and organisational safeguards appropriate to the nature of the information and associated risks. Access is limited where practicable to those with a legitimate need.

No website or internet transmission can be guaranteed completely secure.

We assess suspected personal data breaches and take appropriate containment, investigation and remediation steps. Where legally required, we will notify the relevant supervisory authority and affected individuals within applicable timeframes.

Subject to applicable law and exceptions, you may have rights to access, rectify or erase your personal information; restrict or object to certain processing; receive information in a portable format; and withdraw consent where consent is the lawful basis.

You may also have rights relating to qualifying automated decisions. Not every right applies in every circumstance.

You can contact us using the details below to submit a privacy request. We may need to verify your identity before responding and will respond within the time required by applicable law.

We will explain any lawful reason why a request cannot be fulfilled in whole or in part.

We do not intend to make solely automated decisions about website visitors that produce legal or similarly significant effects. If this practice changes, we will provide relevant information and safeguards as required by law.

Our website and professional services are directed at business audiences and are not intended for children. We do not knowingly seek to collect children's personal information through our general enquiry forms.

Where we send marketing communications, we do so in accordance with applicable consent and electronic marketing requirements. You may opt out of marketing messages at any time using the unsubscribe method provided or by contacting us.

Service and transactional messages may still be sent where necessary for an existing engagement.

Our website may link to third-party websites. We are not responsible for their privacy practices and encourage you to read their policies before sharing personal information.

Where we process personal information on behalf of a client, the client generally determines the purposes and means of processing. Our respective obligations should be documented in an appropriate data processing agreement where required by law.

We process such information in accordance with valid documented instructions and applicable legal requirements.

Please notify us if information you have supplied changes so that we can maintain accurate records where appropriate.

We may disclose information where required by law, to protect legal rights or in connection with a legitimate corporate transaction, subject to applicable confidentiality and data protection obligations.

We may revise this policy when our business operations, technology or legal obligations change. The current version will be made available on this page. Material changes will be communicated where legally required.

If you have concerns about our handling of personal information, please contact us first so that we can investigate. You also have the right to complain to the UK Information Commissioner's Office (ICO), or another competent authority where applicable.