This Privacy Policy explains how Geseto ("we", "us", "our") collects, uses, stores and shares personal data when you visit our website or contact us through it. We are committed to handling your personal data lawfully, fairly and transparently, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
Geseto is the controller of the personal data described in this policy. Our contact details are:
The only way this website collects personal data directly from you is through the contact form. When you submit the form, we process the information you choose to provide, which typically includes:
We use this information only to read and respond to your enquiry, to provide the information or support you have asked for, and to keep a record of our correspondence. Please do not include sensitive information, such as health details or financial account numbers, in your message, as we do not need it to answer your enquiry.
We do not require you to create an account to browse this website, and we do not knowingly collect personal data from children.
Under the UK GDPR we must have a lawful basis for each use of your personal data. We rely on the following:
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry sent through the contact form | Our legitimate interests in answering the people who contact us (Article 6(1)(f)), or, where your enquiry relates to a possible agreement with us, steps taken at your request before entering into a contract (Article 6(1)(b)) |
| Remembering your cookie and privacy choice | Your consent, or, for a cookie that is strictly necessary to store that choice, our legitimate interests in respecting your preferences |
| Advertising measurement on the confirmation page | Your consent (Article 6(1)(a) and PECR), given before any measurement runs |
| Keeping records and defending legal claims | Our legitimate interests, and compliance with legal obligations where they apply |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms and have concluded that they are not. You may ask us for more detail about that assessment at any time.
This website sets one cookie only.
| Cookie name | Purpose | Duration |
|---|---|---|
| privacy_choice | Stores the consent choice you made in our privacy banner, so that we do not ask you again on every visit | One year |
We do not use website analytics, and we do not set session cookies, tracking cookies or any other cookies beyond the one listed above.
Advertising measurement runs only if you have given consent, and only on the confirmation page that appears after you submit the form. If you decline, no advertising measurement takes place. You can change your choice at any time by clearing the privacy_choice cookie in your browser settings, after which the privacy banner will appear again on your next visit.
We keep personal data only for as long as we need it for the purpose it was collected.
When the retention period ends, we delete or irreversibly anonymise the data.
We do not sell your personal data. We share it only where necessary and only with:
If any of these recipients are located outside the United Kingdom, we ensure that an appropriate safeguard is in place, such as an adequacy decision or approved standard contractual clauses, so that your data remains protected to a UK standard.
Under UK data protection law you have the following rights regarding your personal data:
We do not carry out solely automated decision-making that produces legal or similarly significant effects on you.
To exercise any of these rights, email us at [email protected] or write to Geseto, 2 Kirkstall Lane, Leeds, LS6 2XF. We may need to verify your identity before acting on a request. We will respond within one month of receiving it; if your request is complex, we may extend this by up to two further months and will tell you why. We do not charge a fee unless a request is manifestly unfounded or excessive.
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Access to enquiries is limited to people who need it to respond to you. No method of transmission over the internet is completely secure, but we work to keep your data safe and review our measures regularly.
If you have a concern about how we handle your personal data, we would like the chance to put it right first, so please contact us at [email protected]. You also have the right to complain at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.
We may update this Privacy Policy from time to time, for example if our practices or the law change. The latest version will always be published on this page, and we encourage you to review it periodically.
For any question about this policy or your personal data, please contact Geseto: