Privacy Policy

1. Introduction

Welcome to DROP Procurement Consulting Services Ltd ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By accessing or using our website, you agree to the terms of this Privacy Policy. If you do not agree with the terms, please do not access the site.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Fill out our contact form
• Request a consultation or proposal
• Subscribe to our newsletter
• Contact us via email or phone
• Participate in surveys or feedback requests

This information may include:

• Name and surname
• Email address
• Phone number
• Company name and position
• Business address
• Information about your procurement needs

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent
• Referring website
• Device information

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to inquiries: Processing and responding to your contact form submissions and consultation requests
• To provide services: Delivering procurement consulting services as agreed
• To communicate with you: Sending project updates, proposals, and relevant business communications
• To improve our services: Analyzing website usage to enhance user experience
• To send marketing communications: With your consent, we may send newsletters and industry insights
• To comply with legal obligations: Meeting regulatory requirements and protecting our legal rights

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you voluntarily provide information through our contact forms
• Contractual necessity: Processing necessary to fulfill our consulting agreements
• Legitimate interests: Improving our services, preventing fraud, and maintaining website security
• Legal obligation: Compliance with tax, accounting, and regulatory requirements

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service providers: IT service providers, cloud hosting services, and email communication platforms
• Professional advisors: Legal, accounting, and insurance advisors when necessary
• Legal authorities: When required by law or to protect our rights

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure server infrastructure
• Regular security assessments
• Limited access to personal data by authorized personnel only
• Staff training on data protection

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Typically, we retain:

• Contact form submissions: 2 years
• Client records: 7 years (for tax and accounting purposes)
• Marketing preferences: Until you unsubscribe
• Website analytics: 26 months

8. Your Rights

Under GDPR and applicable data protection laws, you have the following rights:

• Right to access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Withdraw consent at any time

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. These include:

• Essential cookies: Necessary for website functionality
• Analytics cookies: Help us understand how visitors interact with our site (Google Analytics)
• Preference cookies: Remember your settings and preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or accept cookies, delete existing cookies, or set preferences for certain websites.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., LinkedIn, Google Maps). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

11. International Data Transfers

As a UK-based company, we primarily process data within the United Kingdom and European Economic Area (EEA). If we transfer your data outside these regions, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Significant changes will be notified via email where appropriate.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Complaints

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: www.ico.org.uk
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF