Privacy Policy

Who we are

SmartGenie Ltd ("we", "us", "our") operates the website www.smartgenie.co.uk.

• Registered address: Reading, United Kingdom
• Data protection contact: privacy@smartgenie.co.uk

What data we collect

When you visit our website, we may collect:

• Cookies and similar technologies — small text files stored on your device. See the Cookies section below for full details.
• Contact information — if you voluntarily submit a form (name, email address, phone number, company name).
• Scanner data — if you use the SmartConsent Scanner, we collect the URL you submit for scanning and your email address (to send results).
• Usage data — pages visited, time on site, referring URL, browser type, device type. This data is anonymised where possible.

How we use your data

We use your data to:

• Provide and improve our website and services
• Respond to enquiries submitted via contact forms
• Send scan results and compliance reports you have requested
• Analyse website usage to improve user experience (only with your consent)
• Send marketing communications (only with your explicit consent)

Legal basis for processing (UK GDPR)

Cookies

Our website uses cookies. We use SmartConsent to manage your cookie preferences. You can change your preferences at any time by clicking the cookie settings link in our footer.

Cookie categories:

• Necessary — required for the website to function. Cannot be disabled.
• Analytics — help us understand how visitors use our website.
• Marketing — used to deliver relevant advertisements.
• Preferences — remember your settings and choices.

Your rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Erase your personal data ("right to be forgotten")
• Restrict processing of your personal data
• Data portability — receive your data in a structured format
• Object to processing based on legitimate interest
• Withdraw consent at any time (this does not affect prior processing)

To exercise any of these rights, contact us at privacy@smartgenie.co.uk.

Data retention

• Cookie consent records: retained for 13 months from the date of consent
• Contact form submissions: retained for 24 months then deleted
• Scanner results and lead data: retained for 24 months then anonymised
• Analytics data: anonymised and retained for 26 months

Data sharing

We do not sell your personal data. We may share data with:

• Analytics providers (e.g., Google Analytics) — only with your consent
• Hosting providers (Microsoft Azure) — as a data processor under a Data Processing Agreement
• Email service providers (Microsoft Graph API) — to send transactional emails you have requested
• Payment processors (Stripe) — only if you purchase a paid plan, and only the data necessary to process payment
• Law enforcement — if required by law

International transfers

Some of our third-party providers (e.g., Stripe) may transfer data outside the UK. These transfers are protected by Standard Contractual Clauses or adequacy decisions.

Security

We take appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), access controls, Content Security Policy headers, and regular security reviews.

Children

Our website is not directed at children under 13. We do not knowingly collect personal data from children.

Changes to this policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.

Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: https://ico.org.uk/make-a-complaint/
• Phone: 0303 123 1113

Contact us

For any data protection queries:

• Email: privacy@smartgenie.co.uk
• Post: SmartGenie Ltd, Reading, United Kingdom