Privacy Policy

1. Who we are

A&J Stuart Online Ltd is the data controller for personal information collected through this website. We are a private limited company registered in England and Wales, company number 13341141, with its registered office at Suite 2C, Brosnan House, 175 Darkes Lane, Potters Bar, Hertfordshire, England, EN6 1BW.

You can contact us about privacy matters using the contact form on this website, or by writing to the registered office address above. [CONFIGURE: a dedicated privacy email address can be published here once confirmed.]

2. Information we collect

We may collect and process the following categories of information:

• Information you submit through the contact form: your name, email address, subject line, message content and your privacy consent confirmation.
• Technical information and server logs: information automatically generated when you visit the website, such as IP address, browser type, requested pages and timestamps. This is processed by our hosting and infrastructure providers to deliver and secure the website.
• Cookies: a small amount of information stored in your browser. See our Cookie Policy for details.

We do not currently use website analytics or advertising technologies. If analytics are introduced in future, this policy and the Cookie Policy will be updated and optional cookies will only be set with your consent.

We do not ask for special category data, payment details or passwords through this website. Please do not include sensitive personal information in a contact message.

3. Why we use your information and our lawful bases

• To respond to enquiries. Lawful basis: legitimate interests (responding to people who contact us) and, where you provide it, your consent.
• To operate, secure and maintain the website. Lawful basis: legitimate interests in keeping the website available, functioning and protected from misuse.
• To meet legal obligations. Lawful basis: legal obligation, where we are required to retain or disclose information.
• Optional cookies, if introduced. Lawful basis: consent.

4. How long we keep information

Contact form messages are retained for as long as needed to deal with the enquiry and for a reasonable period afterwards for record-keeping, normally up to 24 months, unless a longer period is required by law. Technical logs are retained for a short period by our infrastructure providers for security and diagnostic purposes.

5. Security

Contact form submissions are transmitted over an encrypted connection and stored in an access-controlled database. Submissions are not published or made publicly accessible. Access is limited to people who need it to respond to enquiries. No method of transmission or storage is completely secure, but we take appropriate technical and organisational measures to protect your information.

6. Sharing and processors

We do not sell personal information. We share information only where necessary with service providers who process it on our behalf under contract, currently:

• our website hosting and content delivery provider;
• our managed database provider, which stores contact form submissions.

We may also disclose information where required by law, regulation, or to establish, exercise or defend legal claims.

7. International transfers

Our providers may process or store data outside the United Kingdom. Where that happens, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

8. Your rights

Under UK data protection law you have the right to:

• be informed about how your personal data is used;
• request access to a copy of your personal data;
• request rectification of inaccurate or incomplete data;
• request erasure of your data in certain circumstances;
• request restriction of processing in certain circumstances;
• object to processing based on legitimate interests;
• data portability, where applicable;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us using the details in section 1. We will respond within one month, as required by law.

9. Complaints

If you have a concern about how we handle your personal information, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.