Privacy Policy

This Privacy Policy explains how Daylight ("we", "us", "our") collects and uses personal information when you use our website at getdaylight.co.uk and when you contact us about our services. We are committed to protecting your privacy and handling personal data lawfully, fairly, and transparently, in line with UK data protection law (including the UK GDPR and the Data Protection Act 2018).

Who we are

For the purposes of UK data protection law, Daylight is the controller of personal information processed in connection with this website and initial enquiries. If you need to contact us about privacy, use hello@getdaylight.co.uk or the details on our contact page.

What personal information we collect

Depending on how you interact with us, we may collect:

• Contact and enquiry data: name, job title, organisation, email address, phone number, and the content of your message when you email us, call us, or submit a form.
• Technical and usage data: IP address, browser type, device information, general location (e.g. country or region derived from IP), pages viewed, and approximate time on site. This is typically collected via cookies and similar technologies—see our Cookies Policy.
• Communications: records of correspondence if you contact us, including follow-up notes needed to respond or progress a legitimate business relationship.

How and why we use personal information

We use personal information for the following purposes and on these lawful bases:

• To respond to enquiries and provide information about our services (contract steps at your request, or legitimate interests in operating our business and responding to prospects and clients).
• To operate, secure, and improve our website (legitimate interests in understanding how the site is used, fixing issues, and preventing abuse; where required, your consent for non-essential cookies as described in our Cookies Policy).
• To comply with legal obligations (for example, tax, accounting, or regulatory requirements where applicable).
• To establish, exercise, or defend legal claims where necessary (legitimate interests or legal obligation, as applicable).

We do not sell your personal information. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

Legal basis summary

Where we rely on legitimate interests, we consider your rights and apply safeguards (for example, minimising data and offering easy ways to object or opt out where appropriate). Where we need consent (such as certain cookies), we will ask for it separately and you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Retention

We keep personal information only for as long as needed for the purposes above, including to manage client and prospect relationships, meet legal requirements, and resolve disputes. Retention periods vary depending on context (for example, enquiry records may be kept for a limited period after last contact unless a longer period is justified). We review what we hold periodically and delete or anonymise data when it is no longer needed.

Sharing and processors

We may share personal information with trusted service providers who process data on our instructions (for example, email or hosting providers, analytics where used, and IT security services). We require processors to protect your information appropriately. We may also disclose information if required by law, regulation, court order, or to protect our rights, users, or the public.

International transfers

Your information is primarily processed in the UK and/or the European Economic Area. If we ever transfer personal data to countries outside the UK/EEA, we will ensure appropriate safeguards are in place (for example, UK-approved adequacy regulations or standard contractual clauses), as required by applicable law.

Security

We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure; we encourage you to use secure channels when sending sensitive information and to avoid including unnecessary personal data in general enquiries.

Your rights

Under UK data protection law, you may have the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request erasure in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests (in some cases).
• Request portability of certain information you provided, where processing is automated and based on consent or contract.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us using the details above. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

Children

Our website and services are aimed at businesses and professionals. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes may be highlighted on the website or communicated where appropriate.

General information

This policy is provided for transparency and general information. It is not legal advice. If you need documents tailored to your organisation, regulators, or specific data processing activities, you should obtain advice from a qualified professional.