Privacy Policy

Last updated: September 2024

Introduction

marsh-starling is committed to protecting the privacy and security of personal information. This policy explains how we collect, use, store, and protect data when you interact with our website and services.

We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies to all personal data processed by marsh-starling in connection with our energy consulting services.

Information We Collect

We may collect and process the following categories of personal information:

• Identity data: name, job title, company name
• Contact data: email address, business address
• Technical data: IP address, browser type and version, time zone settings, operating system
• Usage data: information about how you use our website
• Enquiry data: information you provide when requesting a consultation or making an enquiry

How We Collect Information

We collect personal data through several methods:

• Direct interactions: when you complete forms on our website, correspond with us by email, or engage with our services
• Automated technologies: as you navigate our website, we may automatically collect technical data about your equipment and browsing patterns
• Third parties: we may receive technical data from analytics providers

How We Use Your Information

We use personal data for the following purposes:

• To respond to your enquiries and provide requested information about our services
• To deliver consulting services you have engaged us to perform
• To administer and improve our website and services
• To comply with legal and regulatory obligations
• To protect our legitimate business interests

Legal Basis for Processing

We process personal data on the following legal grounds:

• Consent: where you have given clear consent for us to process your data for a specific purpose
• Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
• Legitimate interests: where processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal obligation: where processing is necessary to comply with a legal requirement

Data Sharing

We do not sell personal data to third parties. We may share data with:

• Service providers who assist with our website hosting and analytics
• Professional advisers including accountants and legal counsel
• Regulatory authorities where required by law

All third parties are required to respect the security of your personal data and process it in accordance with applicable law.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Enquiry data is typically retained for two years following our last interaction unless there is an ongoing business relationship.

Your Rights

Under data protection law, you have rights including:

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure in certain circumstances
• The right to restrict processing
• The right to data portability
• The right to object to processing

To exercise any of these rights, please contact us using the details provided below.

Data Security

We have implemented appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures are reviewed and updated regularly to maintain appropriate levels of protection.

Changes to This Policy

We may update this privacy policy from time to time. Any significant changes will be communicated through our website. We encourage you to review this page periodically.

Contact Us

For questions about this privacy policy or to exercise your data protection rights, please contact us:

marsh-starling
47 Colmore Row
Birmingham B3 2BS
United Kingdom

Email: [email protected]

You also have the right to make a complaint to the Information Commissioner's Office (ICO) if you believe your data protection rights have been breached.