This privacy policy explains how GIGGABIT LTD (“we”, “us”, “our”) uses personal data when you visit giggabit.co.uk or contact us. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Data controller: GIGGABIT LTD, a company registered in England & Wales.
Contact: info@giggabit.co.uk
Website: giggabit.co.uk
What personal data we collect
Depending on how you interact with us, we may process:
- Contact form and enquiry data: name, email address, company name (if provided), the service or topic you are interested in, and the content of your message.
- Technical and usage data: information your browser sends automatically (such as IP address, browser type, and device type) as needed to deliver the site and maintain security.
- Cookies and similar technologies: where you have consented, small files or identifiers stored on your device. See our Cookie Policy for details.
- Analytics data: where you have given consent, we may collect aggregated usage statistics to understand how the site is used and to improve it.
How we use your personal data
We use personal data to:
- respond to enquiries submitted through our contact channels;
- operate, secure, and improve our website and services;
- meet legal, regulatory, and professional obligations; and
- establish, exercise, or defend legal claims where necessary.
We do not use your personal data for automated decision-making that produces legal or similarly significant effects about you, and we do not sell your personal data.
Legal bases for processing (UK GDPR)
We rely on the following bases, as appropriate:
- Consent (Article 6(1)(a)): where you submit a contact form, accept non-essential cookies, or otherwise clearly agree to a specific use.
- Legitimate interests (Article 6(1)(f)): where processing is necessary for our legitimate interests in running and improving our business and website, provided those interests are not overridden by your rights and interests. Examples include service improvement, basic analytics in aggregated form where permitted, IT security, and fraud prevention. Where required, we balance these interests against your privacy rights.
- Legal obligation (Article 6(1)(c)): where we must process data to comply with applicable law.
Retention
We keep personal data only for as long as necessary for the purposes described in this policy. In particular:
- Contact form and enquiry records: we retain these for up to two (2) years from the date of your last substantive communication, after which we anonymise or securely delete identifying information unless a longer period is required for legal, regulatory, or dispute resolution purposes.
- Security and server logs: typically retained for a shorter period consistent with security needs and then deleted or aggregated.
Your rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access (Article 15): to obtain confirmation of processing and a copy of your personal data.
- Right to rectification (Article 16): to have inaccurate data corrected.
- Right to erasure (Article 17): to request deletion in certain circumstances.
- Right to restriction of processing (Article 18): to limit how we use your data in certain circumstances.
- Right to data portability (Article 20): to receive personal data you provided in a structured, commonly used, machine-readable format, where processing is based on consent or contract and is carried out by automated means.
- Right to object (Article 21): to object to processing based on legitimate interests or for direct marketing (we do not use enquiry data for marketing unless you have opted in).
- Rights related to automated decision-making: you have safeguards where solely automated decisions with legal or similar significant effect apply (we do not currently operate such decisions for website visitors).
To exercise any of these rights, email info@giggabit.co.uk. We may need to verify your identity before responding. You also have the right to lodge a complaint with the UK supervisory authority (see below).
International transfers
Our website and some of our service providers may process data in the United Kingdom, European Economic Area, and other countries, including the United States, where our processors (such as Convex and Vercel) may host or process data. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place as required by UK data protection law (for example, the UK International Data Transfer Agreement, UK Addendum, or other approved mechanisms).
Processors and third parties
We use carefully selected service providers who process personal data on our instructions. They include:
- Convex — database and application backend services.
- Vercel — website hosting and related infrastructure.
We require processors to implement appropriate technical and organisational measures and to process data only in line with our instructions and applicable law.
Cookies
We use cookies and similar technologies as described in our Cookie Policy. Essential cookies may be used without consent; non-essential cookies require your consent before they are set.
Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top of this page will be revised when we make material changes. We encourage you to review this page periodically.
Complaints
If you have concerns about how we handle personal data, please contact us first at info@giggabit.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK regulator for data protection. Further information is available at ico.org.uk.