Privacy Policy

Scope of This Privacy Policy

This Privacy Policy applies to personal data processed in connection with the Website, business enquiries, prospective and existing client communications, supplier and contractor communications, and other ordinary business interactions with Good Soft Development.

Where we process personal data solely on behalf of a client in the course of providing software development, hosting, support or other technology services, we may act as a processor rather than a controller. In those circumstances, the relevant client is responsible for determining the purposes and means of the processing, and the processing will be governed by the applicable service agreement, data processing agreement and the client's own privacy information.

Personal Data We May Collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

• Identity data, such as your name, surname, job title, role or organisation name;
• Contact data, such as your email address, telephone number, business address or other contact details;
• Enquiry and communication data, including information contained in contact forms, emails, messages, meeting notes and other communications with us;
• Business and project information, such as details of your organisation, proposed project, technical requirements, budget, timetable, products, systems or services;
• Technical data, such as IP address, browser type and version, device information, operating system, time zone, approximate location derived from IP address, referring URLs and similar technical information;
• Usage data, such as information about how you use and navigate the Website, pages viewed, links clicked and interactions with Website functionality;
• Marketing and preferences data, including your preferences regarding communications from us where applicable;
• Transaction and billing data, where relevant to an existing client or supplier relationship, such as invoice details, payment references and payment status; and
• Any other personal data that you voluntarily provide to us in connection with an enquiry, project discussion or business relationship.

We do not intentionally request special category personal data through the Website. Please do not submit sensitive personal data through general contact forms unless it is necessary and you have a lawful basis for doing so.

How We Collect Personal Data

We may collect personal data:

• directly from you when you complete a contact form, email us, request a consultation, speak with us, enter into a business relationship or otherwise provide information to us;
• automatically when you access or use the Website through cookies, logs and similar technologies, where applicable;
• from your employer, colleague, representative or other person acting on behalf of your organisation;
• from clients, suppliers, contractors or business partners where this is relevant to a business relationship;
• from public sources such as corporate registers, professional websites, company websites or business networking platforms where lawful and relevant; and
• from service providers that support our Website, communications, analytics, security or business operations.

Purposes and Lawful Bases for Processing

We process personal data only where we have a lawful basis to do so. Depending on the circumstances, we may process personal data for the following purposes and lawful bases:

• To respond to enquiries, arrange consultations and communicate with prospective clients;
• To negotiate, enter into and perform contracts for our services;
• To manage client, supplier and contractor relationships;
• To provide, maintain and improve the Website and our services;
• To protect the security and integrity of our Website, systems and communications, prevent misuse, investigate incidents and detect fraud;
• To maintain business, accounting, tax, legal and compliance records;
• To send business or marketing communications where permitted by law;
• To analyse Website performance and usage; and
• To establish, exercise or defend legal claims and manage disputes.

Where we rely on legitimate interests, we consider the nature and impact of the processing and whether your rights and interests override our interests. You may contact us for further information about a particular legitimate interests assessment where appropriate.

Contact Forms and Business Enquiries

When you submit information through a Website contact form or contact us directly, we use the information you provide to understand your request, respond to you, assess potential cooperation, prepare proposals or quotations where appropriate, and maintain records of our communications.

Providing certain information may be necessary for us to respond meaningfully to your enquiry. If you do not provide sufficient information, we may be unable to assess or respond to your request.

Client and Project Information

If you become a client or discuss a potential project with us, we may process personal data relating to relevant client representatives, personnel, contractors and other stakeholders for project planning, communication, delivery, support, invoicing, account management and related purposes.

Where project materials include personal data controlled by a client, the respective roles of the parties will be determined under the applicable contract and, where required, a data processing agreement.

Cookies and Similar Technologies

The Website may use cookies and similar technologies to enable essential Website functionality, maintain security, remember preferences, understand Website usage and, where applicable, support analytics or other optional functionality.

Where applicable law requires consent for non-essential cookies or similar technologies, we will request consent before placing or accessing them. You may be able to manage your preferences through the Website cookie banner or through your browser settings.

Further information about cookies used on the Website may be set out in our Cookie Policy.

Analytics and Technical Information

We may process technical and usage information to understand how the Website performs, diagnose problems, improve functionality, measure traffic and protect the Website against abuse or security threats.

Where analytics or similar tools involve non-essential cookies or tracking technologies, they will be used in accordance with applicable consent requirements.

Marketing Communications

We may send information about our services, relevant updates or business opportunities where permitted by applicable law.

Where consent is required, we will rely on your consent. In other cases, such as certain business-to-business communications, we may rely on legitimate interests where permitted by law.

You may opt out of marketing communications at any time by using any unsubscribe mechanism provided or by contacting us at good.soft.development.uk@gmail.com.

Sharing Personal Data

We may share personal data where reasonably necessary with hosting and cloud infrastructure providers, communications providers, analytics and security providers, payment and accounting providers, professional advisers, contractors, public authorities where required by law, and a prospective purchaser or successor in a corporate transaction.

We do not sell personal data.

Processors and Service Providers

Where a third-party provider processes personal data on our behalf as a processor, we seek to use providers that offer appropriate data protection and security commitments and we put in place appropriate contractual arrangements where required by law.

Some providers may act as independent controllers for certain processing activities, for example certain banking, payment or professional services. Their own privacy information will apply to those activities.

International Transfers

Some service providers, systems or recipients we use may be located outside the United Kingdom, or may process personal data in countries outside the United Kingdom.

Where personal data is transferred internationally, we will use an applicable lawful transfer mechanism where required, such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, security and reporting requirements and to establish, exercise or defend legal claims.

Retention periods may vary depending on the type of information and relationship, taking into account the amount, nature and sensitivity of the data, applicable limitation periods, contractual requirements and legal obligations.