Last updated: 21 May 2026 · Jurisdiction: United Kingdom · Governing supervisory authority: ICO
1. Data controller
Verdant Ridge Forestry LLP (Scottish registered limited partnership SC684920) trades from Meadowpark House, Quartermile, Edinburgh EH3 9QH. Formal privacy correspondence should be routed to our Data Protection Liaison Desk at [email protected] quoting “UK GDPR Inquiry”.
2. Scope & children
This policy applies strictly to brochure interactions (navigation, enquiries, downloadable collateral when published, and telemetry analogous to aggregated analytics cookies). Brochures are directed at forestry professionals aged 18+; please do not supply data on behalf of minors without parental oversight.
3. Categories of personal data
- Identity & contact data: name, organisational affiliation, postal address references, telephone, email captured via forms or analogue correspondence routed digitally.
- Operational context: messages describing woodland extents, peat concerns, licences, commercial aspirations—classified as unstructured business contact material.
- Technical & usage data: IP-derived coarse geolocation logs, truncated user-agent strings, device parameters, referrer metadata, hashed session identifiers tied to brochure analytics tooling after deployment.
- Consent artefacts: cookie preference selections stored locally unless synchronised deliberately to authenticated CRM ingestion layers.
4. Purposes & lawful bases
- Responding to legitimate enquiries: processing under Article 6(1)(f) GDPR (balanced commercial interest in cultivating credible forestry mandates) supplemented by contractual preparatory obligations once fee arrangements crystallise Article 6(1)(b).
- Security & fraud prevention: Article 6(1)(f) including monitoring aberrant scraping against brochure infrastructure.
- Compliance with statute: Article 6(1)(c) including woodland-related regulatory dossiers HMRC may solicit.
- Optional analytics improvements: Article 6(1)(a) consent collected via foreground cookie tooling with granular toggles—you may withhold analytics acceptance while retaining essential brochure functionality.
5. Cookies & similar technologies
Essential cookies underpin security headers, resilient form hydration, preference recall, load balancing primitives. Analytics cookies (only when accepted) summarise anonymous traffic deltas to validate content hierarchy experiments. Detailed runtime inventory will map to ICC categories before production rollout; revise this policy concurrent with CSP hardening milestones.
6. Automated decision-making
We undertake no profiling that produces legally significant autonomous decisions about natural persons relying solely on automated means.
7. Sharing & subprocessors
Data may traverse UK-based hosting egress, chartered professional indemnity insurers, external counsel, chartered ecologists subcontracted pursuant to nondisclosure, and HMRC where statutory reporting requires. Contracts mandate Article 28 processing terms with technical and organisational safeguards. Any international contingent transfer utilises ICO-endorsed IDTA clauses or equivalency frameworks as interpreted post adequacy rulings you should monitor contemporaneously.
8. Retention
- Commercial inquiry threads: ordinarily 7 years aligning with forestry insurance cycles unless earlier erasure warranted.
- Security logs rolling 13 months truncated.
- Anonymised aggregates indefinitely.
9. Security
TLS 1.2+ in transit expectation, segregation of brochure versus operational GIS datasets, hashed credential storage wherever authentication surfaces appear, tabletop incident rehearsals quarterly.
10. Your statutory rights
Subject to UK GDPR & Data Protection Act 2018 you may invoke access, rectification, erasure, restriction, objection, portability, and supervisory escalation rights. Complain to ICO at https://ico.org.uk/make-a-complaint/. We endeavour to conclude SAR responses within statutory windows absent complex volumetric anomalies.
11. Evolution
Forestry regulatory harmonisation (Peatland statutes, Woodland Carbon Codes) may materially adjust processing—review this publication quarterly for superseding amendments.