Privacy Policy

Vinetree Co (“we”, “us”, “our”) is a design and development studio building websites, intranets, and bespoke digital products for startups and enterprise clients. For the purposes of data protection law, Vinetree Co is the data controller in respect of the personal data described in this policy. If you have any questions, you can reach us using the contact details in section 9.

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity and contact details, such as your name, company, and email address, when you get in touch with us.
• Communications you send to us, including project enquiries and support requests.
• Technical data, such as IP address, browser type, and device information.
• Cookie data, as described in our Cookie Policy.

We process your personal data on the following lawful bases under the UK GDPR:

• Contract — to provide and administer the services you or your business have requested.
• Legitimate interests — to operate, secure, and improve our website, and to respond to enquiries.
• Consent — for any optional marketing communications, which you can withdraw at any time.
• Legal obligation — to comply with applicable laws and regulatory requirements.

We do not sell your personal data. We may share it with trusted service providers who process data on our behalf (for example, hosting and email delivery providers) under appropriate contractual safeguards, and with authorities where we are legally required to do so.

Where personal data is transferred outside the UK, we ensure an appropriate level of protection is in place, such as UK adequacy regulations or the International Data Transfer Agreement.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements, after which it is securely deleted or anonymised.

Under the UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data in certain circumstances.
• Restrict or object to certain processing of your data.
• Data portability, where applicable.
• Withdraw consent at any time where processing is based on consent.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We use cookies and similar technologies as described in our Cookie Policy.

To exercise any of your rights or to ask a question about this policy, please get in touch.