Effective Date: [2013]
Last Updated: [2025]
1. Introduction
This Privacy Policy explains how GW Active Ltd (“we,” “our,” or “us”) collects, uses, and protects your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our services, you consent to the practices outlined in this policy.
2. Data Controller Contact Information
Company Name: GW Active Ltd
Registered Address:
Unit 6 Leylands House
Molesey Road
Hersham
KT12 3PW
United Kingdom
Email: [email protected]
3. What Data We Collect
We may collect and process the following types of personal data:
- Identity Data: Name, date of birth, gender, job title.
- Contact Data: Address, email, phone number.
- Technical Data: IP address, browser type, operating system, device type.
- Financial Data: Bank details, payment transactions.
- Marketing Data: Preferences for receiving communications.
- Cookies and Tracking Data: Website behavior, analytics.
4. How We Collect Your Data
We collect personal data in the following ways:
- When you fill out forms on our website.
- When you sign up for newsletters or services.
- When you contact us via email, phone, or social media.
- Through cookies and tracking technologies.
5. How We Use Your Data
We use personal data for the following purposes:
- Providing Services: Processing orders, transactions, and customer support.
- Marketing & Communications: Sending updates, promotions, and newsletters.
- Legal Compliance: Meeting regulatory obligations and fraud prevention.
- Improving Services: Enhancing user experience and website performance.
6. Legal Basis for Processing Data
Under UK GDPR, we rely on the following legal bases:
- Consent: When you voluntarily provide information.
- Contractual Necessity: When processing is required for service delivery.
- Legal Obligation: To comply with legal and regulatory requirements.
- Legitimate Interests: Where processing is necessary for business operations.
7. Data Sharing & Third Parties
We may share your data with:
- Service providers (e.g., payment processors, hosting providers).
- Regulatory authorities when required by law.
- Business partners only with your consent.
We do not sell or rent personal data to third parties.
8. International Data Transfers
If your data is transferred outside the UK, we ensure adequate safeguards, such as:
- UK-approved Standard Contractual Clauses (SCCs).
- Data protection agreements with third parties.
9. Data Retention
We store your data for as long as necessary to fulfill the purpose for which it was collected or to comply with legal obligations. Retention periods include:
- Financial records: 6 years (as required by tax laws).
- Marketing data: Until consent is withdrawn.
10. Your Data Protection Rights
Under the UK GDPR, you have the following rights:
- Right to Access: Request a copy of your personal data.
- Right to Rectification: Correct inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data (“right to be forgotten”).
- Right to Restrict Processing: Limit how we use your data.
- Right to Object: Object to processing based on legitimate interests.
- Right to Data Portability: Request data transfer to another provider.
- Right to Withdraw Consent: Opt-out of marketing communications at any time.
To exercise these rights, contact us at [email protected].
11. Data Security Measures
We implement strict security measures to protect your data, including:
- Encryption of sensitive data.
- Secure access controls and authentication.
- Regular security audits and staff training.
12. Cookies & Tracking Technologies
Our website uses cookies to enhance user experience. You can manage your cookie preferences in browser settings. For more information, refer to our Cookie Policy.
13. Complaints & Regulatory Authority
If you believe your data protection rights have been violated, you may contact the UK Information Commissioner’s Office (ICO):
- Website: https://ico.org.uk
- Phone: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
14. Policy Updates
We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated “Effective Date.”