Privacy Policy.

Purpose

This Privacy Policy explains how Rplus Analytics Solutions Ltd collects, uses, stores, shares and protects personal data in accordance with UK GDPR, the Data Protection Act 2018 and PECR, and supports information security practices aligned with ISO/IEC 27001.

Who We Are

Rplus Analytics Solutions Ltd, Talbot House, 44 Redwing Drive, Fulwood, Preston PR2 9AS.

Personal Data We Collect

We collect and process the following personal data: information you provide through our contact form — such as your name, email address, and the content of your message; and technical and usage information collected automatically when you visit the site — such as your device type, browser, and how you interact with our pages, gathered through Google Analytics.

We do not collect special category data, and we do not knowingly collect data from children.

How We Use Your Information

We use your personal data to respond to enquiries you submit through our contact form, to communicate with you about our services where you have asked us to, to understand how our website is used so we can improve its content and performance, and to meet our legal and regulatory obligations.

Legal Basis

Under UK GDPR, we rely on the following legal bases:

• Consent — where you have agreed to us contacting you or to non-essential analytics cookies.
• Legitimate interests — to respond to your enquiries and to operate and improve our website, in a way that does not override your rights and freedoms.
• Legal obligation — where we must process data to comply with the law.

Cookies

We use Google Analytics to understand how visitors use our site and to help us improve it. Google Analytics uses cookies to collect information such as your device type, browser, the pages you visit, and how you interact with them. This information helps us measure and improve our website's performance.

Because Google Analytics relies on non-essential cookies, we will ask for your consent before these cookies are set. You can withdraw your consent at any time, and you can also control or delete cookies through your browser settings. Where you do not consent, these analytics cookies will not be used.

Sharing Personal Data

We do not sell your personal data.

We may share it with trusted third parties who help us operate our website, and only where they are bound to protect it. These currently include our website hosting provider (Vercel) and our analytics provider (Google Analytics). We may also disclose data where required to do so by law.

International Transfers

Where personal data is transferred outside the UK, Rplus Analytics ensures appropriate safeguards are implemented.

Data Retention

We keep your personal data only for as long as necessary for the purposes set out in this policy, or as required to meet legal, accounting, or reporting obligations. Enquiries sent to us are generally kept for up to 24 months after our last contact with you, unless you ask us to delete your information sooner.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data in certain circumstances.
• Object to, or request restriction of, our processing.
• Request the transfer of your data (data portability).
• Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, please contact us using the details below. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Information Security

Controls include MFA, RBAC, encryption, secure cloud hosting, endpoint protection, vulnerability management, monitoring and security awareness training.

Personal Data Breaches

Documented procedures exist to detect, investigate and report personal data breaches.

Artificial Intelligence & Data Usage

Where AI, analytics or machine learning services are delivered, client data is processed only in accordance with contractual instructions. Client data is never used to train third-party AI models unless explicitly agreed in writing. Appropriate governance and human oversight are maintained.

Automated Decision Making

No automated decision-making with legal or similarly significant effects.

Children's Privacy

Children's data collected inadvertently will be deleted promptly.

Changes

This policy is reviewed annually, or upon significant business or regulatory change.

Contact

This policy was last reviewed on 7 August 2026.