Privacy Policy
Last updated: November 2026
1. Who We Are
This website is operated by Graham D. Rae Associates Limited, registered in England and Wales (Company Number 03582552). We are registered with the Information Commissioner's Office (ICO) under registration number ZA785406.
For any privacy-related queries, contact us at: webcontact [at] grahamrae.net
2. What Personal Data We Collect
When you contact us by email
If you send us an email via the contact address on this site, we will collect your name, email address, and any information you choose to include in your message. We use this solely to respond to your enquiry.
When you use the contact form
If you send a message using the contact form on this site, we collect your name, email address, organisation (if you choose to give it) and your message. The form is handled by Formspree, a third-party form service, which forwards your message to us by email. We use this information solely to respond to your enquiry.
Website analytics (if enabled)
This site may use Google Analytics 4 to collect anonymised information about how visitors use the site, including pages visited, approximate location (country/region), device type, and time on site. No personally identifiable information is collected through analytics. Analytics cookies are only set with your consent.
What we do not collect
- We do not store contact form submissions on our own web server
- We do not collect payment information
- We do not use retargeting or advertising cookies
- We do not collect data from children
3. Legal Basis for Processing
| Data | Legal Basis |
|---|---|
| Email enquiry correspondence | Legitimate interest: responding to a direct business enquiry |
| Contact form enquiries | Legitimate interest: responding to a direct business enquiry |
| Analytics data (if consented) | Consent: you may accept or decline via the cookie notice |
4. Cookies
Cookies are small text files stored on your device. This site uses the following types:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly necessary | Basic site functionality and your cookie preference | No |
| Analytics (Google Analytics 4) | Anonymised usage statistics | Yes |
You can withdraw your consent to analytics cookies at any time by clicking "Manage cookies" in the footer of this page, or by clearing your browser cookies and declining when the notice reappears.
For more information about Google Analytics and how to opt out, visit: tools.google.com/dlpage/gaoptout
5. How Long We Keep Your Data
- Email correspondence: Retained for as long as the business relationship is active or as required by law, then securely deleted.
- Contact form submissions: Once received by email, treated in the same way as email correspondence. Formspree also keeps a copy for a limited period under its own retention policy.
- Analytics data: Google Analytics data is retained for 14 months (the minimum configurable period). We do not export or archive analytics data separately.
6. Who We Share Data With
We do not sell, rent or trade personal data. We may share data with:
- Google LLC, for analytics processing under Google's data processing terms. Google is certified under the EU–US Data Privacy Framework. For details, see Google's Privacy Policy.
- Formspree, Inc., which processes contact form submissions on our behalf and forwards them to us by email. Formspree is based in the United States and uses Standard Contractual Clauses to protect personal data transferred from the UK and EU. For details, see Formspree's Privacy Policy.
- Our email provider (Microsoft / Outlook), email enquiries are processed and stored via Microsoft's email infrastructure.
No other third parties receive your personal data.
7. Your Rights Under UK GDPR
You have the right to:
- Access: request a copy of any personal data we hold about you
- Rectification: ask us to correct inaccurate data
- Erasure: ask us to delete your data where there is no legitimate reason to continue holding it
- Restriction: ask us to limit how we use your data
- Objection: object to processing based on legitimate interests
- Portability: receive your data in a structured, machine-readable format
- Withdraw consent: where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, contact us at webcontact [at] grahamrae.net. We will respond within one calendar month.
8. Complaints
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
9. Changes to This Policy
We may update this policy from time to time. The date at the top of the page will always reflect the most recent version. We will not notify you of minor changes, but any significant change to how we use personal data will be communicated clearly.
10. Contact
Graham D. Rae Associates Limited
Company Number: 03582552
ICO Registration: ZA785406
Email: webcontact [at] grahamrae.net
Website: grahamrae.net