Privacy Policy

1. Introduction

Parity Technologies (registered company number 67958, Guernsey, Bailiwick of Guernsey) is the data controller responsible for the personal information described in this policy. We are registered with the Office of the Data Protection Authority (ODPA) and process personal data in accordance with the Data Protection (Bailiwick of Guernsey) Law, 2017.

This policy explains how we collect, use, store and protect personal information when you interact with our website, our services and our business, and sets out your rights.

2. Information we collect

We may collect and process the following categories of personal information:

• Contact details — such as your name, email address, telephone number and organisation, provided when you email us, request a consultation, or complete an enquiry.
• Communication records — correspondence and details of your enquiries so we can respond effectively and maintain a record of our dealings.
• Technical data — information collected automatically when you visit our website, such as IP address, browser type, device information and usage analytics, used to improve the site and its security.
• Service data — information shared with us when we deliver managed IT, cyber security or cloud services under an engagement agreement.

We collect most of this information directly from you. Where we deliver services to an organisation, we may receive information about its staff from that organisation, and we act as a processor on its behalf. Providing contact details is voluntary, but without them we may be unable to respond to your enquiry or deliver our services.

3. How we use your information

We use your personal information to:

• Respond to your enquiries and provide consultations;
• Deliver, manage and improve the services we provide;
• Maintain accurate records for accounting and legal purposes;
• Improve our website, services and the experience of visitors;
• Meet our legal, regulatory and contractual obligations under the data protection laws applicable in the Bailiwick of Guernsey.

4. Legal basis for processing

We process your personal information on the following lawful bases:

• Consent — where you have provided information or agreed to receive communications from us.
• Contractual necessity — to take steps before entering into, and to perform, an engagement agreement with you.
• Legitimate interests — to operate our business, respond to enquiries and improve our services, where this does not override your rights.
• Legal obligation — to comply with applicable laws and regulations.

5. Sharing your information

We do not sell your personal information. We may share it with:

• Trusted sub-processors and technology partners who help us deliver services (for example cloud providers or security tooling), under appropriate contractual safeguards.
• Professional advisors, such as legal and accountancy firms, where necessary to provide their services.
• Regulatory or law-enforcement bodies where required by law.

Some of our providers process data outside the Bailiwick of Guernsey. Where we transfer personal information outside the Bailiwick, we only do so to jurisdictions deemed to provide an adequate level of protection, or under appropriate safeguards such as approved contractual clauses, as required by the Data Protection (Bailiwick of Guernsey) Law, 2017.

6. Retention

We retain your personal information only for as long as necessary to fulfil the purposes set out in this policy. In general, enquiry and marketing correspondence is kept for up to two years after our last contact with you, and client engagement and financial records are kept for at least six years to meet accounting, tax and legal obligations. After that, information is securely deleted or anonymised.

7. Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, alteration or disclosure. These measures include access controls, encryption, monitoring and regular security reviews consistent with our Cyber Essentials certification.

8. Cookies

Our website may use cookies and similar technologies to understand how the site is used and to improve your experience. You can control or disable cookies through your browser settings; however, doing so may affect functionality.

9. Your rights

Subject to applicable law, you have the right to:

• Be informed about how your information is used;
• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request erasure of your personal information;
• Object to or restrict certain processing, including direct marketing;
• Withdraw consent at any time, where processing relies on it;
• Receive your personal information in a portable format;
• Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not carry out such automated decision-making or profiling.

To exercise any of these rights, please contact us using the details below. We will respond without undue delay and in any event within the timeframes set out in the Law. There is normally no charge for exercising your rights.

If you are unhappy with how we have handled your personal information, you have the right to complain to the Office of the Data Protection Authority (ODPA), Block C, Lefebvre Court, Lefebvre Street, St Peter Port, Guernsey, GY1 2JP — enquiries@odpa.gg.

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised date.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us: