Privacy Policy

1. Introduction

GCH Corporation Ltd ("GCH", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website at gchcorporation.com (the "Website") or contact us through it.

We are the data controller for the personal data we collect through this Website. This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

We may collect and process the following personal data:

• Contact form data: Your name, email address, company name, phone number, and the content of your message when you submit our contact form.
• Technical data: Your IP address, browser type and version, device type, and operating system, collected automatically when you visit the Website as part of standard hosting, content-delivery, and aggregate traffic analytics logs.

We do not collect sensitive personal data (such as health information, financial data, or information about ethnicity or religion) through this Website.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to your enquiries: When you contact us via the contact form, we use your details to respond to your message. Our lawful basis is legitimate interests.
• To operate the Website: Technical data is processed by our hosting provider to deliver the Website reliably and to protect it from abuse. Our lawful basis is legitimate interests.
• To comply with legal obligations: We may process your data where required to do so by law.

We will never sell your personal data to third parties, and we will not use it for unsolicited marketing without your explicit consent.

4. How We Share Your Data

We share your personal data only with the following categories of third parties, and only to the extent necessary:

• Formspree Inc.: Our contact form is processed by Formspree, which receives your form submission data and forwards it to us by email. Formspree acts as a data processor on our behalf. Their privacy policy is available via formspree.io.
• Cloudflare, Inc.: Our Website is hosted on Cloudflare Pages, which processes technical data (including IP addresses) as part of hosting, content delivery, DDoS protection, and privacy-first aggregate traffic analytics (Cloudflare Web Analytics does not use cookies or track individuals). Cloudflare's privacy policy is available at cloudflare.com.

All third-party processors are required to handle your data in accordance with applicable data protection law.

5. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected:

• Contact form submissions: Retained in our email systems for up to 3 years, or until the enquiry is resolved, whichever is sooner.
• Hosting and technical logs: Retained by our hosting provider for short operational periods in accordance with their standard retention schedule.

6. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate or incomplete data.
• Right to erasure: You may ask us to delete your personal data in certain circumstances.
• Right to restrict processing: You may ask us to limit how we use your data.
• Right to object: You may object to our processing of your data where we rely on legitimate interests.
• Right to data portability: Where processing is based on consent or contract, you may request your data in a portable format.
• Right to withdraw consent: Where any processing is based on your consent, you may withdraw that consent at any time by contacting us.

To exercise any of these rights, please contact us via our contact form. We will respond within one calendar month.

You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), if you believe we have not handled your data lawfully.

7. Cookies

This Website does not set tracking, analytics, or advertising cookies of its own. We use Cloudflare Web Analytics to understand aggregate traffic patterns; this service is cookie-free and does not track individual visitors. Third-party services that you interact with directly (for example, the form-submission service described in Section 4) may set their own cookies when you engage with their features, under their respective privacy policies.

You can manage or delete cookies at any time through your browser settings.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Our Website is served over HTTPS (TLS encryption). Access to contact form submissions is restricted to authorised personnel only.

However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

9. International Transfers

Some of our third-party processors (including Formspree and Cloudflare) may transfer data outside the UK or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK ICO or equivalent mechanisms.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us via our contact form or in writing to:

GCH Corporation Ltd
2 Castle Business Village, Station Road
Hampton, Middlesex, TW12 2BX
England