How we handle your information.

This notice is issued by Remedium Digital (“Remedium”, “we”, “us”), the data controller for the personal data described below.

• Registered name [full legal entity name]
• Company registration number [company number]
• Registered address [registered office address]
• VAT number [VAT number, or state “not VAT registered”]
• ICO registration [ICO registration reference]
• Privacy contact hello@remedium.digital

This notice covers personal data we handle through this website: enquiries sent to us, direct email to the address above, and any account you hold in the Remedium client portal.

Where we handle personal data inside a client’s own systems as part of a project, we usually do so as a processor acting on that client’s instructions. In plain terms: the records in your CRM stay yours, and we only do what you have told us to do with them. That work is governed by the contract and data processing terms agreed with the client, not by this notice.

Enquiries

Your name, company, email address, telephone number if you give one, the type of work you are asking about, the budget band and timescale you select, and whatever you write in the message.

Sales portal accounts

Where you are authorised to use our internal sales portal: your name, work email address, role and permissions, and a record of activity within the workspace.

Technical data

Our hosting provider records standard server information such as IP address, request time, page requested and browser user agent. Any additional measurement or analytics in use must be listed here: [list analytics and measurement tools, or state none].

Under the UK GDPR we have to be able to say what allows us to hold each thing, for each reason we hold it. Our answers are in the table below.

Where we rely on legitimate interests, we have considered whether that interest is overridden by your rights, and you can object at any time using the contact details above.

The internal sales portal sets one cookie, and it exists only to keep you signed in. Without it the portal cannot work. It is not used to track you anywhere.

Any non-essential cookie — analytics, advertising, embedded media — requires your consent before it is set. The full list must be completed here before launch: [list every cookie, its purpose, its provider and its lifetime].

If non-essential cookies are introduced, a consent mechanism must be added to the site at the same time. [confirm whether a consent banner is required]

We do not sell personal data and we do not share it for anyone else’s marketing. We do use service providers who process data on our behalf under contract.

• Hosting and infrastructure [name the hosting provider and region]
• Email [name the email provider]
• Database [name the database provider and region]
• Payments [name the payment processor, if used]
• Anything else [complete this list before publishing]

We may also disclose personal data where we are required to by law, or to establish or defend legal claims.

Some providers may process data outside the United Kingdom. Where that happens we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, with appropriate safeguards in place.

The transfers that actually occur must be recorded here: [list each provider, the country, and the safeguard relied on].

We keep personal data only for as long as we need it, then delete it. The periods below are suggestions in a draft, and must be checked against how the business actually works before this notice is published.

• Enquiries that do not become projects [suggested: 12 months]
• Client project records [suggested: 6 years from the end of the engagement]
• Accounting records [statutory minimum: 6 years]
• Server logs [confirm with the hosting provider]

Under the UK GDPR and the Data Protection Act 2018 you have the right to ask us for a copy of your personal data, to have inaccurate data corrected, to have data erased in certain circumstances, to restrict or object to processing, and to receive data you gave us in a portable format. Where we rely on consent, you can withdraw it at any time.

To exercise any of these, email hello@remedium.digital. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are not satisfied with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you came to us first so we can put it right.

Access to client systems and to the portal is restricted to the people who need it, and permissions are agreed with the client before a system goes live. Accounts are individual rather than shared, and access is removed when an engagement ends.

The specific technical measures in place — encryption in transit and at rest, backup policy, access review frequency, incident response — must be described here rather than implied: [describe the actual security measures].

We will update this notice when what we do with personal data changes. The version and the date it took effect are shown at the foot of the page. Material changes affecting existing clients will be notified directly rather than published quietly.