Privacy Policy

1. Introduction Fallow Group Ltd ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your information when you visit our website, hosted on Squarespace, or contact us directly.

We are the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. What Data We Collect We may collect the following personal data:

- Identity data — your name

- Contact data — email address, phone number, postal address

- Enquiry data — details you provide when submitting a contact form or requesting a quote

- Technical data — IP address, browser type, device information, pages visited and time spent on our website (collected automatically via Squarespace and cookies)

- Communication data — any correspondence between you and us

3. How We Collect Your Data We collect data in the following ways:

- When you complete and submit a contact or enquiry form on our website

- When you contact us directly by phone or email

- Automatically via cookies and Squarespace's built-in analytics when you browse our website

4. How We Use Your Data We use your personal data for the following purposes:

- To respond to your enquiries and provide quotes

- To carry out and manage contracted works

- To send invoices and process payments

- To comply with legal and regulatory obligations

- To improve our website and understand how visitors use it

We will never sell your data to third parties or use it for unsolicited marketing without your explicit consent.

5. Legal Basis for Processing Under UK GDPR, we process your data on the following legal bases:

- Contract — where processing is necessary to fulfil a contract with you or take steps at your request before entering into one

- Legal obligation — where we are required to process data to comply with the law

- Legitimate interests — to respond to enquiries and improve our services, where your interests and rights do not override ours

- Consent — where you have explicitly agreed to us processing your data, such as via a contact form submission

6. Cookies Our website uses cookies — small text files stored on your device — to help the site function and to understand how it is used. Squarespace uses cookies for essential site functionality and analytics purposes.

Types of cookies we use:

- Essential cookies — necessary for the website to function correctly

- Analytics cookies — help us understand visitor behaviour to improve the site (via Squarespace Analytics)

When you first visit our website, you will be shown a cookie consent banner. You can manage or withdraw your cookie consent at any time via your browser settings. Please note that disabling certain cookies may affect how the website functions.

For more information on how Squarespace handles data, please refer to the Squarespace Privacy Policy.

7. Data Sharing We do not sell or rent your personal data. We may share your data with trusted third parties only where necessary:

- Squarespace Inc. — our website platform, which processes data on our behalf as a data processor. Squarespace is certified under the EU-US Data Privacy Framework and complies with UK data transfer requirements.

- Accountants or legal advisors — where required for legal or financial compliance

- Regulatory authorities — where required by law

8. Data Retention We retain your personal data only for as long as necessary:

- Enquiry and contact data — up to 2 years from last contact

- Contract and financial records — up to 7 years in line with HMRC requirements

- Website analytics data — as per Squarespace's retention policy

After these periods, your data will be securely deleted or anonymised.

9. Your Rights Under UK GDPR you have the following rights regarding your personal data:

- Right to access — request a copy of the data we hold about you

- Right to rectification — ask us to correct inaccurate or incomplete data

- Right to erasure — request deletion of your data where there is no lawful reason to retain it

- Right to restrict processing — ask us to limit how we use your data

- Right to data portability — request your data in a portable format

- Right to object — object to processing based on legitimate interests

- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at the details above. We will respond within one calendar month.

10. Changes to This Policy We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We recommend checking this page periodically.

Last updated: May 2026