Pattrn Analytics & Intelligence Ltd is the controller of the personal data described in this policy. Our registered office is 264 Banbury Road, Oxford OX2 7DY, UK. You can contact us about privacy or data protection matters by emailing [email protected].

Website enquiries and business contacts

If you contact us through our website, by email, or in the course of a business relationship, we may collect your name, job title, organisation, email address, telephone number if provided, the contents of your message, and records of correspondence.

We use this information to respond to enquiries, manage business relationships, provide services, and operate our business. Our lawful basis is legitimate interests, including managing and developing our business.

We usually retain enquiry and business contact records while they are required or justified by an ongoing business relationship, contractual obligation, or legal requirement.

Website security and operation

When you visit our website, technical information may be processed automatically. This may include your IP address, browser and device information, date and time of access, website request information, and security or network information.

We use this information to operate our website, maintain security, prevent abuse, and protect our systems. Our lawful basis is legitimate interests in operating a secure and reliable website.

Our website is protected by Cloudflare. Contact form submissions are processed by Netlify. Some pages use Google-hosted fonts. These providers may process personal data on our behalf and may involve processing outside the UK with appropriate safeguards.

We only use cookies that are strictly necessary for the operation and security of the website.

Publicly available information

In the course of providing research, analytical, and reporting services, we may process personal data obtained from publicly available sources.

This may include information relating to individuals acting in professional, organisational, governmental, or other public-facing capacities.

We use this information for research, analysis, reporting, and service delivery purposes. Our lawful basis is legitimate interests, including providing research and analytical services to our clients.

Where we rely on legitimate interests, we consider and balance our interests against the rights and freedoms of affected individuals.

Where personal data is obtained from publicly available sources rather than directly from individuals, it may not be practical or proportionate to provide individual notice in every case. In such circumstances, we may rely on the applicable exemption under data protection law and provide information about this processing through this Privacy Policy.

Who we share personal data with

We may share personal data with our employees, contractors, advisers, technology and infrastructure providers, professional advisers, auditors, legal representatives, clients where relevant to research, reporting or service delivery, and public authorities or regulators where required by law.

We do not sell personal data.

International transfers

Some of our service providers may process personal data outside the United Kingdom or European Economic Area. Where this happens, we take appropriate steps to protect personal data, including using contractual safeguards where required.

How long we keep personal data

We keep personal data only for as long as necessary for the purposes described in this policy.

Research and analytical data may be retained for ongoing analytical, research, reporting, security, and historical reference purposes. We review retention periodically to ensure it remains necessary and proportionate.

Automated decision-making

We do not use personal data to make automated decisions that produce legal or similarly significant effects on individuals.

Your rights

Depending on the circumstances, you may have the right to request access to personal data we hold about you, request correction of inaccurate personal data, request deletion of personal data, request restriction of processing, object to processing based on legitimate interests, and request portability of certain personal data.

Not all rights apply in all circumstances. Where permitted by law, we may refuse requests where we have overriding legitimate grounds to continue processing, or where a request is unfounded, excessive, or otherwise exempt.

To exercise your rights, email [email protected].

Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

If you are located in the European Union, you may also have the right to complain to your local supervisory authority.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be made available on our website.