Privacy Policy

Last updated: July 2026

1. Introduction

Salty Lavender ("we", "our", or "the agency") is committed to protecting the privacy of everyone who contacts us or uses our website. This Privacy Policy explains how we collect, use and protect your personal information in line with the UK GDPR and applicable data protection law.

2. Information We Collect

We collect different types of information when you use our services:

2.1 Information You Provide Directly

  • Name and contact details
  • Email address
  • Company or organisation
  • Information about your business or project
  • Messages sent through our contact form

2.2 Information Collected Automatically

  • IP address
  • Browser and device type
  • Pages visited on our site
  • Time spent on our site
  • Referrals from other sites

3. How We Use Your Information

Your information is used to:

  • Respond to your enquiries and requests
  • Provide and improve our services
  • Improve the experience on our site
  • Send marketing communications (with your consent)
  • Comply with legal obligations
  • Prevent fraud and keep our systems secure

4. Legal Basis for Processing

We process your personal data on the following bases:

  • Consent: When you give us explicit permission
  • Performance of a contract: To provide our services
  • Legitimate interest: To improve and promote our services
  • Legal obligation: When required by law

5. Information Sharing

We do not sell or rent your personal information. We only share it in the following situations:

  • With your explicit consent
  • To comply with legal obligations
  • With trusted service providers who help us operate
  • In the event of a merger, acquisition or sale of assets

6. Cookies and Similar Technologies

We use cookies to improve your experience on our site. Cookies can be:

  • Essential: Necessary for basic site functionality
  • Functional: Remember your preferences
  • Analytical: Help us understand how you use the site
  • Marketing: Used for personalised advertising

7. Data Security

We put appropriate technical and organisational measures in place to protect your personal information against unauthorised access, alteration, disclosure or destruction, including encryption, access controls and regular monitoring.

8. Data Retention

We keep your personal information only for as long as necessary for the purposes for which it was collected, or as required by law. When it is no longer needed, it is securely deleted.

9. Your Rights

Under the UK GDPR, you have the following rights:

  • Access: Request copies of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data
  • Restriction: Restrict how we process your data
  • Portability: Transfer your data to another provider
  • Objection: Object to the processing of your data

10. International Transfers

If we transfer your data outside the UK or the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will note significant changes on our site, and the date of the last update will always appear at the top of this page.

12. Contact

For questions about this Privacy Policy or to exercise your rights, contact us:

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been breached.