Bamber Devo
← Back to site
Privacy Policy
This website (bamberdevo.uk) is operated by Green Gecko Systems Limited, a company registered in England & Wales (company number 17320485), registered office 21 Kettering Road, Market Harborough, Leicestershire LE16 8AN. In this policy, "we", "us" and "our" refer to Green Gecko Systems Limited.
This policy explains what personal data we collect through this website, why we collect it, how long we keep it, and what rights you have over it under the UK GDPR and the Data Protection Act 2018.
1. Who is the data controller
Green Gecko Systems Limited, 21 Kettering Road, Market Harborough, Leicestershire LE16 8AN, United Kingdom. Company number 17320485, registered in England & Wales.
We are the data controller for the personal data described in this policy. We are not required to appoint a Data Protection Officer; data enquiries are handled at the contact points below.
2. How to contact us about your data
Email [email protected] or telephone +44 7737 133 194. You may also write to the registered office above. You do not have to use the enquiry form to make a data request.
3. What personal data we collect
| Source | Data |
|---|---|
| Enquiry form on this website | Your name, your email address, any services you tick, and the message you write. Nothing beyond name, email and message is required. |
| Email or telephone contact | Whatever you choose to tell us, plus the email address or number you contact us from. |
| If you use the WhatsApp button on this website, your WhatsApp display name, your telephone number and the messages you send. The conversation is carried on WhatsApp's own infrastructure, which is operated by Meta under its own terms and privacy policy. Nothing is sent to Meta unless you choose to start that conversation. | |
| Your browser | Standard web server request data held by our hosting provider (IP address, timestamp, page requested, browser user-agent). We do not combine this with anything else and we do not use it to identify you. |
| Client engagements | Where we go on to work for you, the business contact details and system access we need to do the work. That processing is governed by the agreement between us. |
We do not collect special category data through this website, and we do not knowingly collect data from children. There is no automated decision-making or profiling anywhere on this site.
4. Why we process it, and on what lawful basis
| Purpose | Lawful basis (Article 6 UK GDPR) |
|---|---|
| Replying to your enquiry and preparing a quote | Article 6(1)(b) — steps taken at your request before entering into a contract. |
| Delivering work you have engaged us for | Article 6(1)(b) — performance of a contract. |
| Keeping records of quotes, invoices and correspondence | Article 6(1)(c) — legal obligation (tax and company records), and Article 6(1)(f) — our legitimate interest in defending claims. |
| Keeping this website available and secure | Article 6(1)(f) — our legitimate interest in running a functioning, secure site. |
| Storing your cookie preference on your device | Strictly necessary for a service you requested, so no consent is required under PECR. See our Cookie Policy. |
We do not send marketing email. If that ever changes, we will ask for your consent first and every message will carry a one-click unsubscribe.
5. How long we keep it
- Enquiries that don't become work: deleted 12 months after the last message.
- Client correspondence and project records: kept for the engagement, then 6 years from the end of the contract, in line with the Limitation Act 1980.
- Invoices and accounting records: 6 years from the end of the accounting period, as required by HMRC and the Companies Act 2006.
- Web server logs: held by our hosting provider and rotated within 30 days.
6. Who else sees it
We keep the list short and we do not sell, rent or trade personal data to anyone, ever.
| Recipient | Role |
|---|---|
| Our hosting provider (UK data centre) | Processor. Stores this website and its server logs. |
| Our email provider | Processor. Carries and stores the correspondence between us. |
| Our accountant | Processor. Sees invoices and payment records only. |
| WhatsApp (Meta) | Carries any WhatsApp conversation you choose to start with us. Meta is a controller in its own right for that service, not our processor. Use email or telephone instead if you would rather it did not. |
| HMRC, Companies House, or a court | Where the law requires disclosure. |
Each processor is engaged under a written contract that meets Article 28 of the UK GDPR.
7. Transfers outside the UK
Our hosting and email are provided from within the United Kingdom. A small number of files are loaded from other domains, which causes your browser to make a request to servers that may sit outside the UK: the GSAP animation library from Cloudflare's cdnjs on the home page, and the Switzer typeface from Fontshare on these policy pages. Those requests reveal your IP address and browser user-agent to those providers. No form data is sent to them. Where any transfer of personal data outside the UK does occur, it is covered by the UK International Data Transfer Addendum or UK adequacy regulations.
8. Your rights
Under the UK GDPR you have the right to:
- be told what we hold about you and get a copy of it (access);
- have inaccurate data corrected (rectification);
- have data deleted where we no longer need it (erasure);
- restrict how we use it while a dispute is resolved;
- receive data you gave us in a portable, machine-readable form;
- object to processing we carry out under legitimate interests;
- withdraw consent at any time, where consent was the basis we relied on.
Email [email protected] to exercise any of these. We reply within one month and there is no charge. We may ask you to confirm your identity before we release information.
9. Complaints
If you think we have handled your data badly, tell us first and we will try to put it right. You also have the right to complain to the UK supervisory authority: the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline 0303 123 1113, or ico.org.uk.
10. Cookies
This website sets no analytics, advertising or tracking cookies. The only thing stored on your device is a single preference recording your answer to the cookie notice, so that we stop asking. The detail is in our Cookie Policy.
11. Security
This website is served over HTTPS. Enquiry form submissions are handled inside the browser and are not written to a database on this site. Access to email and project systems uses multi-factor authentication, and access to a client's systems is limited to the people doing the work and revoked at the end of an engagement. If a breach ever creates a risk to your rights, we will notify the ICO within 72 hours and tell you directly where the risk is high.
12. Changes to this policy
If we change this policy we update the date at the top. Material changes affecting people who have already contacted us will be sent by email.