How we handle your data.
Truestay Growth Ltd is a small UK consultancy. This policy explains what we collect, why, and what you can ask us to do about it. Written plainly, because the law does not require obfuscation.
Who we are.
This policy explains how Truestay Growth Ltd ("Truestay", "we", "us") collects and uses personal data. Truestay Growth Ltd is a company registered in England and Wales under company number 17390012, with its registered office at 282 Leigh Road, Leigh-on-Sea, Essex SS9 1BW.
For the purposes of UK GDPR and the Data Protection Act 2018, Truestay Growth Ltd is the data controller for the personal data described in this policy.
You can reach the person responsible for data protection at Team@truestayltd.co.uk.
What we collect.
We collect the following categories of personal data:
Enquiry data
When you contact us through the website form, by email, or by phone: your name, email address, phone number (if you provide one), property postcode, the stage you are at, and anything you write in the message body.
Client data
If you become a client: contact details for you and any authorised representatives, correspondence, records of advice given, property information relevant to the engagement, and payment details (processed by our payment providers, not stored by us).
Website usage data
Anonymised or pseudonymised information about how visitors use the site: pages viewed, referring source, approximate location by country, device type. Collected via cookies where you consent, described in more detail in the cookie policy.
Correspondence
Emails, meeting notes, call recordings if you have agreed to a call being recorded, and any documents you share with us.
Why we collect it.
We rely on the following lawful bases under UK GDPR:
- Contract. To respond to enquiries, provide the services set out in our engagement letter, invoice, and communicate with clients about work in progress.
- Legitimate interests. To improve the website, respond to enquiries that do not lead to a contract, keep records of who we have spoken to and about what, and defend against legal claims.
- Legal obligation. To comply with our record-keeping duties under tax, company and anti-money-laundering law where applicable.
- Consent. Where you have specifically ticked a box, for example on the cookie banner or the contact form.
We do not use your personal data for automated decision-making or profiling.
Who we share it with.
We share personal data only with the parties listed below, and only where necessary for the purpose stated.
- Form submissions. Contact form submissions are processed via Formspree, which forwards the message to our inbox and holds a copy in accordance with its own privacy policy.
- Email and productivity. Our email, calendar and file storage run on Google Workspace.
- Accounting. Client billing records are held by our accounting provider for tax and statutory record-keeping.
- Professional advisers. Legal, insurance and accountancy advisers, where instructing them is necessary.
- Government and regulators. Where required by law, for example HMRC, or in response to a lawful request from a competent authority.
We do not sell your personal data. We do not share it with marketing partners.
How long we keep it.
Retention periods depend on the type of data.
- Enquiries that do not become clients. Held for 12 months, then deleted.
- Client records. Held for 7 years after the end of the engagement, in line with UK statutory record-keeping requirements.
- Correspondence. Held for the duration of the working relationship plus 7 years.
- Website analytics. Aggregated and pseudonymised data is held for up to 26 months.
Where it is stored.
Personal data is stored on servers within the United Kingdom and the European Economic Area. Some of our processors, notably Google, may transfer data to the United States under UK-approved transfer mechanisms, including the UK extension to the EU-US Data Privacy Framework and standard contractual clauses where applicable.
We take reasonable technical and organisational measures to protect personal data, including access controls, encryption in transit, and staff-only access to client information.
Your rights.
Under UK GDPR you have the right to:
- Ask for a copy of the personal data we hold about you.
- Ask us to correct data that is inaccurate or incomplete.
- Ask us to delete data, where the legal basis for holding it no longer applies.
- Ask us to restrict how we use your data while a query is resolved.
- Object to us using your data on the basis of legitimate interests.
- Ask us to move your data to another service where technically feasible.
- Withdraw consent, where consent was the lawful basis in the first place.
To exercise any of these rights, email Team@truestayltd.co.uk. We will respond within one calendar month. There is no charge for reasonable requests.
Cookies and analytics.
We use a small number of cookies to make the site work and to understand which pages help people the most. The details, and how to change your preferences, are set out in the cookie policy.
Changes to this policy.
We may update this policy from time to time. When we make a material change, we will publish the updated version here and change the version number and effective date at the top of the page. Small edits for clarity may be made without a version bump.
How to contact us.
Any question about this policy, or how we handle your personal data, should be sent to Team@truestayltd.co.uk, or by post to Truestay Growth Ltd, 282 Leigh Road, Leigh-on-Sea, Essex SS9 1BW.