Stevenson McHale Privacy Policy

Privacy Policy
Last updated: August 14, 2025This policy explains how Stevenson McHale Ltd (“we”, “us”, “our”) collects and uses personal data when you visit our website and when you contact or work with us.We are the data controller for the personal data described here (except where we act as a processor for our clients—see When we act as a processor below).Who we areStevenson McHale Ltd
Registered in Scotland: SC[NUMBER]
Registered office: [ADDRESS, POSTCODE]
Email: [[email protected]]If you have questions about this policy or your data, email us at [[email protected]].The data we collect
a) Website visitors & enquiriesContact details you submit (name, email, phone, company, message).Usage & device data (IP address, browser, pages viewed, timestamps, referring URLs).Cookies/trackers for analytics and advertising (see Cookies below).b) Prospects & clientsBusiness contact details and role, meeting notes, proposal/SOW details.Creative/project materials you share with us.We do not intentionally collect special category data via this site.How we get your dataDirectly from you (forms, email, phone, meetings).Automatically via cookies and similar tech when you use our site.From third parties (e.g., LinkedIn, referrals) where lawful.Why we use your data (purposes & lawful bases)
Purpose Examples Lawful basis
Respond to enquiries Reply to forms/emails, schedule calls Legitimate interests (to operate and grow our business) or pre-contract steps
Provide/price our services Proposals, SOWs, delivery and account management Contract (perform or enter a contract)
Improve the site Analytics, performance/debugging Legitimate interests
Marketing (B2B) Relevant updates/outreach to business contacts Legitimate interests (respecting PECR) or Consent where required
Advertising/retargeting Meta/Google ads if consented Consent
Legal/records Invoices, tax, compliance Legal obligation / Legitimate interestsYou can opt out of marketing at any time (unsubscribe link or email us).Cookies & similar technologiesWe use cookies and similar technologies for:Essential functions (site operation),Analytics (e.g., Google Analytics), andAdvertising (e.g., Meta Pixel).Non-essential cookies run only with your consent. You can manage/withdraw consent via Cookie Settings in the footer at any time. For details see our [Cookie Policy].Who we share data withWe don’t sell your data. We share it with trusted service providers who help us run our business, such as:Website hosting/CMS (e.g., Carrd), email and productivity tools, CRM, analytics (e.g., Google Analytics), advertising platforms (e.g., Meta).Professional advisers (accountants/solicitors) and where required by law or to protect our rights.These providers only process data under our instructions and appropriate safeguards.International transfersSome providers are outside the UK (e.g., US). Where we transfer personal data internationally, we use approved safeguards, such as the UK IDTA or EU SCCs with UK Addendum, plus additional measures where appropriate.How long we keep dataWe keep personal data only as long as needed, for example:Enquiries: up to 24 months after last contact.Client/contract records & invoices: typically 6–7 years (legal/accounting).Analytics/ads data: per your cookie preferences and provider limits.
When no longer needed, we delete or anonymise data securely.SecurityWe use appropriate technical and organisational measures to protect personal data, including access controls, encryption where appropriate, and vendor due diligence. No method is 100% secure, but we work to keep risks proportionate and low.Your rights (UK GDPR)You have the right to:Access your data and request a copyRectify inaccuraciesErase data (in certain cases)Restrict or object to processing (including direct marketing)Data portability (for data you provided to us)Withdraw consent where processing relies on consentTo exercise your rights, email [[email protected]]. We may need to verify your identity.Complaints: You can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113. We’d appreciate the chance to resolve concerns first.ChildrenOur site and services are aimed at adults in a business context. We do not knowingly collect data from children.When we act as a processorFor certain client services (e.g., managing paid social campaigns on the client’s behalf), we may process personal data as a processor under the client’s instructions. In those cases, our Data Processing Addendum (DPA) and the client contract govern that processing, and the client’s own privacy notices apply to their end users.Changes to this policyWe may update this policy from time to time. Material changes will be highlighted on this page with a new “Last updated” date.Contact usFor privacy queries or requests, contact:
Stevenson McHale Ltd — [[email protected]]
Registered office: [ADDRESS, POSTCODE]
Registered in Scotland: SC[NUMBER]