Privacy Policy

1. Introduction

Nectar Swirl ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website nectar-swirl.com and use our services related to British traditions and cultural heritage.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Subscribe to our newsletter
• Contact us through our contact form
• Register for our cultural programs or tours
• Participate in surveys or feedback forms

This information may include:

• Name
• Email address
• Phone number
• Postal address
• Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage patterns, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on our site
• Referring website
• Date and time of visits

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing and improving our services
• Communicating with you about our programs and services
• Sending newsletters and marketing communications (with your consent)
• Responding to your inquiries and customer service requests
• Analyzing website usage to improve user experience
• Complying with legal obligations
• Preventing fraud and ensuring website security

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for us to process your personal data for specific purposes
• Contract: When processing is necessary for the performance of a contract with you
• Legal obligation: When we need to comply with legal requirements
• Legitimate interests: When we have a legitimate business interest that doesn't override your privacy rights

5. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist us in operating our website and conducting our business
• Legal Requirements: We may disclose information when required by law or to protect our rights, property, or safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred
• Consent: We may share information with your explicit consent

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

However, please note that no method of transmission over the internet or electronic storage is 100% secure.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Newsletter subscriptions: Until you unsubscribe or request deletion
• Contact inquiries: For 3 years after the last communication
• Website analytics data: For 2 years
• Legal obligations: As required by applicable law

8. Your Rights

Under UK GDPR and applicable data protection laws, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Request transfer of your data
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided below.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our use of cookies, please refer to our Cookie Policy.

10. International Data Transfers

We primarily process data within the United Kingdom. If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the UK Government
• Standard contractual clauses
• Binding corporate rules
• Certification schemes

11. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Data Protection Officer

If you have concerns about how we handle your personal data, you can also contact our Data Protection Officer at [email protected] or file a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.