Privacy Policy

1. Who we are (Data Controller)

The controller responsible for your personal data is:

We have not appointed a statutory Data Protection Officer as we are not legally required to do so. For any data protection enquiry, please write to the email address above.

2. Personal data we collect

We collect only the personal data you actively provide, plus minimal technical data required to operate the site:

• ·Enquiry form data — your name, email address, the topic you select, and the content of your message.
• ·Email correspondence — if you write to us directly, the email address you use and the content of your message.
• ·Technical log data — your IP address, browser type and version, the pages you visit and the time of access. This data is collected by our hosting provider in standard server logs.

We do not knowingly collect special category data (e.g. health, political opinions, religious beliefs). Please do not include such information in your enquiry.

3. How we use your data and legal basis

• To respond to your enquiry — legal basis: pre-contractual steps at your request (Art. 6(1)(b) UK/EU GDPR) and our legitimate interest in handling business communications (Art. 6(1)(f)).
• To operate and secure the website — legal basis: our legitimate interest in providing a stable, secure service (Art. 6(1)(f)).
• To comply with legal obligations — for example record-keeping for tax purposes once a mandate is agreed — legal basis: legal obligation (Art. 6(1)(c)).

We do not use your data for profiling or automated decision-making with legal effects, and we do not sell or rent your data.

4. Third-party processors

We use the following service providers to deliver this site. They process your data on our behalf under a data processing agreement:

• ·Web3Forms — receives and forwards enquiry-form submissions to our inbox. Privacy policy: web3forms.com/privacy-policy.
• ·Hosting provider — stores the website files and processes server log data for security and performance monitoring.
• ·Email provider — delivers and stores email correspondence between us and you.

We do not use cookies, analytics, advertising trackers, social-media pixels, or third-party fonts. Web fonts are served from our own domain.

5. International data transfers

Some of our processors may store or process data outside the United Kingdom and the European Economic Area. Where this is the case, we rely on appropriate safeguards as required by Article 46 UK/EU GDPR — typically the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum — or on transfers to countries covered by an adequacy decision. A copy of the safeguards in place can be requested at the email address above.

6. How long we keep your data

• ·Enquiry-form submissions and email correspondence: retained for up to 24 months after our last meaningful contact, then deleted, unless a mandate is agreed.
• ·Server log data: retained for up to 90 days for security purposes.
• ·Records required for tax and accounting purposes: retained for six (6) years in line with HMRC requirements.

7. Cookies

This website does not set any cookies, including analytics, advertising or tracking cookies. No consent banner is therefore required. If we ever introduce non-essential cookies, we will request your explicit consent first via a banner that complies with the UK Privacy and Electronic Communications Regulations (PECR) and Art. 7 EU GDPR.

8. Your rights

Under the UK GDPR and the EU GDPR you have the following rights regarding your personal data, free of charge:

• ·Access — request a copy of the personal data we hold about you (Art. 15).
• ·Rectification — ask us to correct inaccurate or incomplete data (Art. 16).
• ·Erasure — ask us to delete your data where there is no overriding legal reason to retain it (Art. 17).
• ·Restriction — ask us to limit the processing of your data in specific circumstances (Art. 18).
• ·Portability — receive your data in a structured, machine-readable format (Art. 20).
• ·Objection — object to processing based on legitimate interests (Art. 21).
• ·Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, write to office@beyondlimitspowerltd.com. We will respond within one month of receiving your request, in line with Art. 12(3) UK/EU GDPR.

9. Right to lodge a complaint

If you believe we have processed your data unlawfully, you may lodge a complaint with a supervisory authority:

• ·United Kingdom — Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF · ico.org.uk
• ·European Union / EEA — the data protection authority of your country of residence, place of work, or the place where the alleged infringement occurred.

10. Security

We use TLS encryption (HTTPS) for all traffic to and from this site. We restrict access to enquiry-form data to authorised personnel. No method of transmission over the internet is 100% secure; you submit data at your own risk, and we ask that you do not send confidential financial information until a mandate is in place and a secure channel has been agreed.

11. Children

Our services are directed at adult professionals only. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time to reflect changes in law or in our processing activities. The "Last updated" date at the top of this page indicates when the most recent revision took effect. Material changes will be highlighted prominently on this page.