Privacy Policy – Space & Time Solutions

1. This Privacy Policy sets out the rules for processing personal data collected through the website spaceandtimesolutions.co.uk, hereinafter referred to as the “Website”.
2. The owner of the Website and the Data Controller is Space & Time Solutions, with contact email: hello@spaceandtimesolutions.co.uk, hereinafter referred to as the Controller.
3. Personal data collected by the Controller through the Website is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
4. The Controller takes special care to respect the privacy of clients and website visitors.

§ 1 Types of processed data, purposes and legal basis

1. The Controller collects information about natural persons using the Website, including individuals inquiring about or using counselling and mediation services, hereinafter referred to as “Clients”.
2. The Controller processes personal data of Clients in connection with the use of the contact form service and enquiries on the Website for the purpose necessary to perform a contract or to take steps prior to entering into a contract – processing basis under Art. 6(1)(b) UK GDPR.
3. Where counselling or mediation services involve the processing of health data or other sensitive details, such data is processed under Article 9(2)(h) of the UK GDPR (provision of health or social care or treatment) or with the explicit consent of the Client under Article 9(2)(a) UK GDPR.
4. When using the contact form service, the Client may provide the following data:
– email address
– first name
– phone number
– any additional information provided voluntarily within the message body.
5. While using the Website, technical information may be collected automatically, including: the IP address, browser type, operating system, access time, and navigational data regarding user interactions with the Website. This data is processed based on the Controller’s legitimate interest (Art. 6(1)(f) UK GDPR) to ensure IT security, proper Website management, and service improvement.

§ 2 Data recipients

1. The Client’s personal data is transferred only to trusted service providers used by the Controller to operate the Website and provide services (processors), such as hosting providers, IT support, and secure communication tools, who process data strictly on the Controller’s instructions.
2. Service providers are bound by data processing agreements compliant with UK data protection standards.
3. Personal data may be disclosed to authorized statutory authorities if required by UK law or legal proceedings.

§ 3 Data retention period

1. Clients’ personal data is retained only for as long as necessary to fulfil the purposes for which it was collected:
1.1. Where processing is based on consent, data is retained until consent is withdrawn.
1.2. Where processing relates to a contract or service provision, data is retained for the duration of the service and subsequently for the standard legal limitation period under UK law (typically 6 years for contract-related claims) to protect both parties’ legal interests.

§ 4 Cookies mechanism

1. The Website uses cookies (small text files stored on the user’s end device) in accordance with the UK Privacy and Electronic Communications Regulations (PECR).
2. Non-essential cookies (such as analytics or performance cookies) are only loaded and executed after the user has provided explicit consent via the Website’s cookie consent banner.
3. Users can manage or withdraw their cookie preferences at any time through the cookie settings available on the Website or via their browser configuration.
4. The Controller uses Google Analytics to analyze website traffic and improve user experience, strictly integrated with the website’s cookie consent mechanism to ensure tracking occurs only after user consent is secured.

§ 5 Rights of data subjects

Under the UK GDPR, individuals whose data is processed have the following rights:
1. The right to be informed about the collection and use of their personal data.
2. The right of access to their personal data and to receive a copy.
3. The right to rectification if personal data is inaccurate or incomplete.
4. The right to erasure (“right to be forgotten”) under specific circumstances.
5. The right to restrict or object to processing.
6. The right to data portability.
7. The right to withdraw consent at any time (where processing is based on consent).
8. The right to lodge a complaint with a supervisory authority. In the UK, the supervisory authority for data protection is the Information Commissioner’s Office (ICO): www.ico.org.uk.

Requests regarding personal data and the exercise of rights should be directed to the Controller via email: hello@spaceandtimesolutions.co.uk.

§ 6 Changes to the Privacy Policy

1. This Privacy Policy may be updated from time to time to reflect changes in legal requirements or website functionality.
2. Date of last modification: October 6, 2026.