Privacy Policy
How we collect, use, and protect your personal information.
Last updated: August 2026
Introduction
witty-canopy is committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our website or engage our consultation services.
We are the data controller for the personal information we process. If you have questions about this policy or our data practices, please contact us at [email protected].
Information We Collect
We may collect and process the following categories of personal data:
- Identity data: name, title, date of birth
- Contact data: email address, postal address
- Consultation data: information you provide about your circumstances relevant to benefits applications
- Technical data: IP address, browser type, time zone, operating system
- Usage data: how you use our website and services
How We Collect Your Data
We collect data through direct interactions when you fill in forms on our website, correspond with us, or attend consultations. We also collect technical data automatically as you navigate our site, using cookies and similar technologies.
How We Use Your Data
We process your personal data for the following purposes:
- To provide consultation services you have requested
- To manage our relationship with you, including responding to enquiries
- To improve our website and services
- To comply with legal obligations
Legal Basis for Processing
We rely on the following legal bases to process your personal data:
- Performance of a contract: when processing is necessary to fulfil services you have requested
- Legitimate interests: to operate our business effectively and improve our services
- Consent: where you have given clear consent for specific processing activities
- Legal obligation: when we must comply with applicable laws
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Consultation records are retained for a minimum of six years following completion of services.
Data Sharing
We do not sell your personal data to third parties. We may share data with service providers who assist in operating our business, such as IT support and professional advisors. All third parties are required to respect the security of your data and treat it in accordance with applicable law.
Your Rights
Under data protection law, you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request erasure of your data in certain circumstances
- Object to processing based on legitimate interests
- Request restriction of processing
- Request data portability
- Withdraw consent at any time where consent was the basis for processing
To exercise any of these rights, please contact us at [email protected].
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and access controls.
International Transfers
We do not routinely transfer your personal data outside the United Kingdom. If such transfer becomes necessary, we will ensure appropriate safeguards are in place to protect your data.
Changes to This Policy
We may update this privacy policy periodically. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.
Contact
For questions or concerns about this privacy policy or our data practices, please contact:
witty-canopy
42 Royal Mile Court
Edinburgh, EH1 2PB
United Kingdom
Email: [email protected]
You have the right to make a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues, at any time.