Legal

Privacy Policy.

Last updated: 13 September 2026. What we collect, why, and what your rights are.

Who we are

This website is operated by Trisec Consulting Ltd ("Trisec", "we", "us"), a web development studio based in Rugby, UK. This policy explains how we collect, use, and protect personal data when you visit this site or get in touch with us, in line with UK GDPR and the Data Protection Act 2018.

What we collect

We only collect what's needed to do the things below:

  • Enquiry and brief forms — name, email address, and whatever you tell us about your project (service needed, budget range, timeline, message). Some forms also accept a phone number if you choose to give one.
  • Website analytics — anonymised-where-possible usage data (pages viewed, approximate location, device/browser type, how you found the site) via Google Analytics, loaded through Google Tag Manager.
  • Case studies and testimonials — where we publish a client name, logo, or quote, that's done with the client's agreement, not collected from your visit to the site.

We don't collect payment details through this website — no card or bank information is ever entered here.

Why we collect it, and our lawful basis

  • Responding to enquiries — lawful basis: taking steps at your request prior to entering a contract, or our legitimate interest in responding to a business enquiry you've initiated.
  • Analytics — lawful basis: consent, where required under UK PECR rules for non-essential cookies (see our Cookie Policy).

Who we share it with

When you submit an enquiry or brief form, the details go directly to our own team and are also recorded in the CRM systems we use to manage enquiries — currently HubSpot and Zoho CRM (both processing data within the EU). We don't sell, rent, or trade your personal data to third parties for marketing purposes.

Website analytics data is processed by Google (Google Analytics / Google Tag Manager), which may involve data being processed outside the UK — Google's standard contractual clauses and equivalent safeguards apply to this transfer.

How long we keep it

Enquiry and CRM data is kept for as long as it's relevant to a live or prospective business relationship, and is periodically reviewed. Analytics data is retained according to Google Analytics' standard retention settings. If you'd like your enquiry data deleted sooner, contact us and we'll action it.

Your rights

Under UK GDPR, you have the right to:

  • Ask what personal data we hold about you, and get a copy of it (right of access)
  • Ask us to correct inaccurate data
  • Ask us to delete your data ("right to be forgotten"), where applicable
  • Object to how we're using your data, or ask us to restrict processing
  • Ask for your data in a portable format
  • Withdraw consent at any time, where consent is the basis for processing (e.g. analytics cookies)

To exercise any of these, email us via the details on our Contact page. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you think we've mishandled your data.

Cookies

This site uses cookies for analytics. See our Cookie Policy for the full list and how to control them.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will always reflect the most recent version.

Contact us

Questions about this policy or your data? Get in touch via our Contact page.