Privacy notice

Who is responsible

Graftwerk Ltd is the data controller. We are a company registered in England and Wales under company number 17412720, based in Barnsley, South Yorkshire.

For questions or requests about your information, email privacy@graftwerk.co.uk.

What we collect

We may hold your name, job title, employer, work email address, professional LinkedIn profile, relevant public business information and a note of the business reason we thought contact might be relevant. We may also keep correspondence, meeting details and your communication preferences.

We do not seek special-category information, private telephone numbers or information about your personal life for prospecting.

Where it comes from

We may receive information directly from you or from a referral. For business prospecting, we may obtain business contact and professional information from publicly available sources, including company websites, professional networking platforms, business directories and public registers such as Companies House.

We may also obtain or verify this information through third-party business information and data services.

How we research

We may research organisations and professional contacts manually or using automated and AI-assisted tools. This may include collecting, organising, checking and summarising information available on public websites.

We review information before using it and retain only what is relevant to the person's professional role and our business purposes.

Why we use it

We use business contact information to identify organisations that may have a relevant operational need, introduce Graftwerk's own services, answer enquiries, arrange conversations and keep an accurate record of responses.

Our lawful basis is legitimate interests: Graftwerk's interest in finding customers and discussing relevant services with people acting in a professional capacity. We limit the information used, contact only business roles and balance that interest against your rights and expectations.

How long we keep it

Unless a business relationship develops, we review prospect information and delete or anonymise it within six months of collection. We delete it sooner when it is stale, inaccurate or no longer relevant.

If you object or opt out, we keep the minimum information needed on a suppression list for as long as necessary to respect that choice. Enquiries, client records and accounting records follow separate retention periods based on the relationship and any legal requirements.

Who receives it

We do not sell your information. We use trusted service providers for business email, calendars, document storage and contact management. They process information only to provide those services and under appropriate contractual protections.

Some providers may process information outside the UK. Where required, we use recognised safeguards for those transfers.

Website and bookings

This website does not use analytics or advertising cookies. If you follow the booking link, Google operates that service under its own privacy terms. Graftwerk receives the details you submit there and uses them to arrange and manage the conversation.

Your rights

Depending on the circumstances, you can ask us for a copy of your information, ask us to correct or delete it, restrict its use, or object to our use of it. Your right to object to direct marketing is absolute.

We do not use your information for decisions that produce legal or similarly significant effects through automated processing.

Contact privacy@graftwerk.co.uk to exercise a right. You can also complain to the Information Commissioner's Office.

Changes to this notice

We will update this page when our processing changes. The effective date at the top shows when it was last revised.