Privacy Policy

Last updated: 8 September 2026

Introduction

This Privacy Policy explains how vesperdrift collects, uses, and protects personal information provided through our website and professional services. We are committed to safeguarding your privacy and ensuring compliance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We collect personal information that you provide directly when you:

Submit enquiry forms or assessment requests through our website
Correspond with us via email
Engage our environmental consulting services
Subscribe to communications or updates

The types of personal information we may collect include:

Name and contact details (email address, postal address)
Organisation name and role
Information about your environmental consulting requirements
Communications and correspondence with our team

How We Use Your Information

We use the personal information we collect for the following purposes:

To respond to enquiries and assessment requests
To provide environmental consulting services and deliver agreed project work
To communicate regarding ongoing projects and service delivery
To improve our website functionality and service offerings
To comply with legal and regulatory obligations
To maintain records necessary for business operations and professional indemnity requirements

Legal Basis for Processing

We process personal information under the following legal bases:

Contractual necessity: Processing is necessary to fulfil consulting service agreements and respond to service requests
Legitimate interests: Processing is necessary for our legitimate business interests, including responding to enquiries, improving services, and maintaining business records
Legal obligation: Processing is necessary to comply with legal and regulatory requirements
Consent: Where we have obtained your explicit consent for specific processing activities

Information Sharing and Disclosure

We do not sell, rent, or trade personal information to third parties. We may share information in the following circumstances:

With specialist subcontractors or technical experts engaged to support specific project deliverables, under confidentiality agreements
With professional advisors (legal, accounting, insurance) as necessary for business operations
When required by law, regulation, court order, or governmental authority
To protect our legal rights, prevent fraud, or ensure safety

Data Retention

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law or professional standards. Project-related information is typically retained for seven years following project completion, in accordance with professional indemnity insurance requirements. Marketing communications data is retained until you withdraw consent or request deletion.

Your Rights

Under UK GDPR, you have the following rights regarding your personal information:

Right of access: You may request a copy of the personal information we hold about you
Right to rectification: You may request correction of inaccurate or incomplete information
Right to erasure: You may request deletion of your personal information in certain circumstances
Right to restrict processing: You may request that we limit how we use your information
Right to data portability: You may request transfer of your information to another provider
Right to object: You may object to processing based on legitimate interests or direct marketing
Right to withdraw consent: Where processing is based on consent, you may withdraw this at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to requests within one month, as required by UK GDPR.

Cookies and Website Analytics

Our website uses cookies and similar technologies. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

Security Measures

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and secure storage systems. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external sites. We encourage you to review the privacy policies of any third-party websites you visit.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this policy regularly.

Contact Information

If you have questions about this Privacy Policy or how we handle your personal information, please contact us at:

Email: [email protected]
Address: 47 Deansgate, Manchester, M3 2AY, United Kingdom

Supervisory Authority

If you believe we have not handled your personal information in accordance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk