Privacy Policy

Last updated: 28 August 2026

1. Who we are

This website and the services available through it are operated by RASP Compliancy LTD (“RASP”, “we”, “us” or “our”), a company registered in England.

Registered office: 110 Cleavers Avenue, Milton Keynes, Buckinghamshire, MK14 7DG, England.
Company number: 16734425
ICO registration reference: ZC137323
Privacy contact: info@raspcompliancy.co.uk

For the purposes of UK data protection law, including the UK GDPR and the Data Protection Act 2018, RASP Compliancy LTD is the data controller for personal data collected through this website and in connection with services purchased through our online shop.

2. What this policy covers

This policy explains what personal data we collect, how and why we use it, the lawful bases we rely on, who we may share it with, how long we keep it, and your rights in relation to it.

This policy applies to personal data collected through our website, contact forms, Service Brief forms, online shop, customer orders, email communications and related customer-service activities. It does not apply to third-party websites that we link to. Please read the privacy information of those websites separately.

3. Personal data we collect

3.1 Enquiries and contact forms

When you contact us using a website form, by email or by telephone, we may collect:

  • Your name.
  • Your email address.
  • Your telephone number, if you choose to provide it.
  • Your organisation name, job title and business contact details, if you provide them.
  • The contents of your enquiry and any information or attachments you choose to send us.

3.2 Orders and payments

When you purchase a service through our online shop, we may collect:

  • Your name, billing address, email address and telephone number.
  • Your organisation details where you provide them.
  • Order details, including the service purchased, price, order number, payment status and order history.
  • Communications about your order, cancellation, refund, complaint or service delivery.

Card payments are processed by WooPayments and its payment-processing partners. We do not receive or store your full card number, security code or other full card-payment credentials on our website.

3.3 Service Brief forms and service information

After an order, we may ask you to complete a Service Brief form or provide information needed to deliver the service. This may include contact information, organisation information, service requirements, documents, evidence, instructions, feedback and correspondence relevant to the work you have asked us to carry out.

Please do not submit special category personal data or confidential information about children, families, service users, employees or other individuals through general website contact forms unless we have specifically asked for it and have agreed an appropriate secure method for receiving it. Where a project requires us to process additional or sensitive information, we will address this in the relevant project documentation, contract or data-processing arrangements.

3.4 Technical and usage data

When you use our website, technical information may be collected automatically by your browser, hosting provider, security tools and essential website services. This may include:

  • IP address.
  • Browser type and version.
  • Device type, operating system and browser settings.
  • Pages viewed, referring pages and how you navigate our website.
  • Date, time and duration of visits.
  • Security, error and diagnostic information.

If we use analytics or marketing technologies, we will provide appropriate information and seek consent where required before non-essential cookies or similar technologies are placed on your device.

4. How we use personal data and our lawful bases

4.1 Responding to enquiries

We use your contact information and enquiry details to read, respond to and manage enquiries about our services.

Lawful basis: Legitimate interests. It is in our legitimate interests to respond to people who contact us about our services, and we consider this use to be within reasonable expectations when you contact us.

4.2 Providing services and managing orders

We use order, contact, payment-status and Service Brief information to process your order, communicate with you, provide the service, manage amendments, deliver agreed work, process refunds where applicable, and deal with complaints or customer support.

Lawful basis: Performance of a contract, or taking steps at your request before entering into a contract. We may also use information to comply with legal obligations, including accounting, tax and record-keeping requirements.

4.3 Operating, protecting and improving our website

We use technical information to operate the website, maintain security and performance, prevent fraud or misuse, troubleshoot problems and improve content and user experience.

Lawful basis: Legitimate interests. We have a legitimate interest in operating an efficient, secure and effective website and business.

4.4 Marketing

We do not currently operate a marketing mailing list or newsletter through this website. If we introduce email marketing or similar direct marketing, we will update this policy and obtain consent where required, or otherwise rely on another lawful basis permitted by law.

4.5 Legal claims and legal obligations

We may use and retain personal data where necessary to comply with legal obligations, establish, exercise or defend legal claims, protect our rights, prevent fraud or cooperate with regulators, law-enforcement bodies or professional advisers.

Lawful basis: Legal obligation and legitimate interests, as applicable.

5. Cookies and similar technologies

Our website uses, or may use, cookies and similar technologies. Cookies are small text files stored on your device that help websites work and can help us understand how the site is used.

We may use strictly necessary cookies for website security, functionality, shopping basket and checkout functions, payment processing, fraud prevention and your requested website services. These cookies do not require consent where they are strictly necessary for the service you request.

We will ask for your consent before placing non-essential cookies, such as analytics, advertising or marketing cookies, on your device. You can manage your preferences through our cookie banner or settings, where available, and you can also manage cookies through your browser settings. Blocking some cookies may affect how the website works.

Please see our Cookie Policy for further information about cookies used on this website.

6. Who we share personal data with

We do not sell personal data and we do not share personal data with third parties for their own direct-marketing purposes.

We may share personal data where necessary with the following categories of recipients:

  • Website, hosting, security, domain, IT and email service providers.
  • WordPress, WooCommerce, WooPayments and payment-processing partners, for the operation of the website, online shop, checkout and card payments.
  • Form, customer-communication, booking or document-management providers that we use to receive and manage enquiries, orders and Service Brief information.
  • Professional advisers, such as accountants, insurers and legal advisers, where necessary.
  • Regulators, government authorities, law-enforcement bodies, courts or other parties where required by law or necessary to protect legal rights.
  • Other consultants or partners working on a specific project, only where necessary, proportionate and appropriate to the service being provided.

We require service providers to handle personal data securely and, where they act as processors on our behalf, to process it only in accordance with our instructions and applicable data-protection law.

7. International transfers

Some of our service providers may process personal data outside the United Kingdom. Where personal data is transferred outside the UK, we will take steps to ensure that an appropriate level of protection is in place.

Depending on the service provider and destination, safeguards may include a UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to the European Commission’s standard contractual clauses, or another lawful transfer mechanism.

8. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including providing services, meeting legal, accounting and tax obligations, resolving disputes and enforcing agreements.

  • Contact enquiries: Usually kept for up to 2 years from the last contact, unless they lead to a contract, a dispute or another reason requiring longer retention.
  • Customer orders, invoices and payment records: Usually kept for up to 6 years after the end of the relevant financial year, or longer where required by law or necessary for legal claims.
  • Service Brief and project information: Kept for the period necessary to provide the service and manage any follow-up, then retained only as long as necessary for our legal, regulatory, contractual or legitimate business needs.
  • Technical and analytics information: Kept for the period set within the relevant service or tool, after which it is deleted, aggregated or anonymised where appropriate.

We review retention periods periodically and may retain information for longer where reasonably necessary to establish, exercise or defend legal claims, comply with legal obligations or address a complaint, dispute, audit or investigation.

9. Your rights

Under UK data-protection law, you may have the following rights in relation to your personal data:

  • Right of access – to ask for a copy of the personal data we hold about you.
  • Right to rectification – to ask us to correct inaccurate or incomplete personal data.
  • Right to erasure – to ask us to delete personal data in certain circumstances.
  • Right to restrict processing – to ask us to limit how we use your personal data in certain circumstances.
  • Right to object – to object to processing where we rely on legitimate interests.
  • Right to data portability – in certain circumstances, to receive personal data you provided in a structured, commonly used and machine-readable format, or ask us to transfer it to another organisation.
  • Right to withdraw consent – where we rely on consent, you may withdraw it at any time. This will not affect the lawfulness of processing before consent was withdrawn.
  • Rights relating to automated decision-making – we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

These rights are not absolute and may be subject to legal conditions and exemptions. To exercise your rights, please email info@raspcompliancy.co.uk. We may ask for information to verify your identity before responding.

10. Complaints

If you have concerns about how we use your personal data, please contact us first at info@raspcompliancy.co.uk so that we can try to resolve the matter.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

11. Changes to this policy

We may update this Privacy Policy from time to time, for example where our services, systems, business practices or legal obligations change. The latest version will always be published on this page with a revised “Last updated” date.