Privacy Policy
Last updated: September 2026
Introduction
This privacy policy explains how pebble-magpie collects, uses, and protects personal information provided through this website and during our professional engagements.
Information we collect
Information you provide directly
When you submit consultation requests or contact us, we collect:
- Full name
- Email address
- Organisation details
- Service selection and project requirements
- Any additional information included in your inquiry
Information collected automatically
When you visit our website, we may collect:
- IP address and general location information
- Browser type and version
- Pages visited and time spent on site
- Referring website addresses
How we use your information
We use collected information for the following purposes:
- Responding to consultation requests and providing proposals
- Delivering contracted ecological consulting services
- Communicating about ongoing projects and deliverables
- Improving our website functionality and user experience
- Complying with legal obligations and maintaining business records
Legal basis for processing
We process personal data based on:
- Consent: when you submit forms or contact us voluntarily
- Contractual necessity: when providing agreed services
- Legitimate interests: for business operations and service improvement
- Legal obligations: for regulatory compliance and record-keeping
Data sharing and disclosure
We do not sell or rent personal information to third parties. We may share information with:
- Professional service providers assisting with project delivery, under confidentiality agreements
- Regulatory authorities when required by UK environmental or data protection law
- Legal advisors in connection with professional obligations
Data retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, typically:
- Inquiry data: retained for up to 12 months if no engagement proceeds
- Client project data: retained for 7 years following project completion for professional liability purposes
- Website analytics: aggregated and anonymized after 24 months
Your rights
Under UK data protection law, you have the right to:
- Access personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your data in certain circumstances
- Object to processing based on legitimate interests
- Request restriction of processing
- Data portability where technically feasible
- Withdraw consent where that is the basis for processing
To exercise these rights, contact us at [email protected]
Data security
We implement appropriate technical and organisational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include secure data storage, access controls, and regular security assessments.
International transfers
We operate primarily within the United Kingdom. If data transfers outside the UK become necessary for service delivery, we ensure appropriate safeguards are in place consistent with UK data protection requirements.
Children's privacy
Our services are directed at organisations and business professionals. We do not knowingly collect information from individuals under 18 years of age.
Changes to this policy
We may update this privacy policy to reflect changes in our practices or legal requirements. Material changes will be communicated through website notification or direct contact where appropriate.
Contact information
For questions about this privacy policy or our data practices, contact:
Email: [email protected]
Address: 42 Division Street, Sheffield, S1 4GF, United Kingdom
Supervisory authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters, at ico.org.uk