This Privacy Policy explains how Cottage Gear Legal processes personal data through cottagegearzenith.garden in connection with its website and related communications. It applies to visitors, prospective clients, and other persons who interact with us online. The policy is intended to provide a clear summary of our data handling practices under applicable privacy law, including the GDPR where relevant.
This section introduces how personal information, user rights, and support pathways are addressed in the document below.
We process personal data to operate and secure the website, respond to enquiries, manage client and prospective client communications, provide legal services in the IT sector, maintain records, handle billing or administration where applicable, comply with legal and professional obligations, and protect against misuse, fraud, or security incidents. We may also use limited technical data to improve site performance and understand general usage patterns.
We may share personal data with trusted service providers that support website hosting, security, analytics, communications, document handling, or other operational functions. In the context of legal services, data may also be shared with clients, counterparties, advisers, or other persons involved in a matter where this is necessary and lawful. Such recipients are expected to process data only for the relevant purpose and under appropriate confidentiality or contractual safeguards.
We may disclose personal data to public authorities, courts, or other parties where required by law, regulation, or a valid legal process. We may also share data where necessary to establish, exercise, or defend legal claims, to protect our rights, or to comply with obligations arising from legal services in the IT sector.
We may process identification details, contact details, message content, account or case information, technical data such as device and browser data, and usage data relating to visits and interactions with the site. Where needed for legal services in the IT sector, we may also process information provided in enquiries, instructions, or documents shared with us.
We collect data directly from you when you submit forms, send messages, or otherwise communicate with us. We also receive data automatically through your use of the website, including log data, cookie data, and similar technical information. In some cases, data may be provided by clients, counterparties, or other persons involved in a matter where this is necessary for the service.
The site may use strictly necessary cookies to support core functions, preference cookies to remember settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent depending on their purpose. Non-essential cookies are used only where permitted by applicable law and, where required, after consent.
You may block or delete cookies through your browser settings, although some site functions may not work properly if certain cookies are disabled. Where the site provides a cookie banner or preference tool, you can use it to manage non-essential cookies. Browser controls remain available even after a preference has been set.
Cottage Gear Legal processes personal data as a controller for the operation of the website, handling of enquiries, delivery of legal services, compliance with legal obligations, and related administrative activities. Processing is based on the legal grounds applicable to the specific activity, including consent where used, performance of a contract or pre-contractual steps, compliance with legal obligations, and legitimate interests where permitted.
Where users are located in the European Economic Area, the GDPR applies to the processing of personal data carried out through this website and related communications, to the extent the regulation is applicable.
Where the GDPR applies, you may have the right to access, rectify, erase, restrict, or object to processing, and the right to data portability where applicable. If processing is based on consent, you may withdraw consent at any time without affecting prior processing. You may also lodge a complaint with the competent supervisory authority if you consider that your rights have been infringed.
Depending on the circumstances, you may have rights to access your data, request correction, ask for deletion, object to certain processing, or request restriction of processing. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. Some requests may be limited where we must keep data for legal, regulatory, or evidentiary reasons.
To exercise a privacy right, please provide enough information to identify the relevant data and the nature of your request. We may need to verify your identity before responding. If a request is complex or involves multiple records, we may respond within the period allowed by law and explain any lawful limitation or refusal.
We retain personal data for as long as necessary to handle enquiries, provide services, maintain business records, meet legal and regulatory obligations, resolve disputes, and enforce or defend legal claims. When data is no longer needed, we delete it or anonymise it, unless a longer retention period is required or permitted by law.
We may update this Privacy Policy to reflect changes in our processing activities, legal requirements, or operational needs. The revised version will apply from the date it is published on the website unless a different effective date is stated. Where changes are material, we will take reasonable steps to draw attention to them.
