Privacy Policy

1. Introduction

This Privacy Policy sets out how Sorbelin ("we", "us", "our") collects, uses, and protects personal information when you use the sorbelin.info website. We are committed to ensuring that your privacy is protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The data controller for this website is Sorbelin, operating from 29 Devonshire Street, London W1G 6PL, United Kingdom. Enquiries regarding data protection can be directed to [email protected].

By using this website you acknowledge the practices described in this policy. If you do not agree, please discontinue use of the site.

2. Information We Collect

We may collect and process the following categories of personal information:

• Contact information — name, email address, and any message content you submit via the contact form on this site.
• Usage data — pages visited, time spent on pages, browser type, device type, and referring URL. This data is collected in aggregate and does not identify individual visitors by default.
• Cookie data — identifiers stored in browser cookies, as detailed in the Cookie Policy available at cookie-policy.php.

We do not collect sensitive personal data (as defined under UK GDPR Article 9). We do not collect financial or payment information through this website.

3. How We Use Your Information

Personal data collected is used exclusively for the following purposes:

• Responding to enquiries submitted through the contact form.
• Improving the structure and content of the website based on aggregate usage patterns.
• Fulfilling legal obligations under applicable UK law.
• Managing cookie preferences in accordance with your stated consent choices.

We do not use personal data for automated decision-making or profiling. We do not sell, rent, or otherwise transfer your personal information to third parties for marketing purposes.

4. Legal Basis for Processing

We process personal data on the following legal bases under UK GDPR:

• Consent — for optional cookies and any newsletter or communications you opt into.
• Legitimate interests — for aggregate website analytics, where the processing does not override your rights.
• Contract performance — for responding to enquiries you submit directly.
• Legal obligation — where processing is required to comply with applicable legislation.

5. Data Retention

Contact form submissions are retained for a period of 12 months from the date of receipt and are then securely deleted unless an ongoing correspondence requires longer retention. Aggregate analytics data may be held indefinitely in anonymised form.

Cookie data is retained for periods specific to each cookie type, as detailed in the Cookie Policy.

6. Your Rights Under UK GDPR

You have the following rights with respect to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate data.
• Right to erasure — to request deletion of your data where no legitimate basis for retention exists.
• Right to restrict processing — to request that processing be limited in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests.

To exercise any of the above rights, write to us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Third-Party Services

This website may use third-party services including Google Analytics (aggregated usage statistics) and embedded mapping services. These services operate under their own privacy policies. We do not transmit personally identifying information to these services beyond what is standard in browser-based interactions (e.g. IP address as part of HTTP requests).

We do not embed social media tracking pixels or advertising network scripts on this site.

8. Data Security

We take reasonable technical and organisational steps to protect personal data against unauthorised access, disclosure, alteration, or loss. The website is served over HTTPS. Contact form data is transmitted using encrypted connections. Internal access to correspondence data is limited to the individuals responsible for responding to enquiries.

9. Cookies

This website uses cookies. For a full explanation of the cookies in use, their purpose, and how to manage your preferences, please refer to the Cookie Policy.

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Material changes will be reflected in an updated "last updated" date at the top of this page. Continued use of the website following any update constitutes acknowledgement of the revised policy.

For any questions regarding this policy, contact us at [email protected].