Privacy Policy

1. Introduction

GCH Corporation Ltd ("GCH", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website at gchcorporation.com (the "Website") or contact us through it.

We are the data controller for the personal data we collect through this Website. This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

We may collect and process the following personal data:

• Contact form data: Your name, email address, company name, phone number, and the content of your message when you submit our contact form.
• Analytics data: If you accept cookies, we collect anonymised information about how you use our Website, including pages visited, time spent on pages, and the source of your visit, via Google Analytics 4.
• Technical data: Your IP address, browser type and version, device type, and operating system, collected automatically when you visit the Website.
• Cookie data: Information stored in cookies on your device. See Section 7 (Cookies) for full details.

We do not collect sensitive personal data (such as health information, financial data, or information about ethnicity or religion) through this Website.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to your enquiries: When you contact us via the contact form, we use your details to respond to your message. Our lawful basis is legitimate interests.
• To improve our Website: We use anonymised analytics data to understand how visitors use our Website and to improve its content and performance. Our lawful basis is legitimate interests (or consent, where analytics cookies are used).
• To comply with legal obligations: We may process your data where required to do so by law.

We will never sell your personal data to third parties, and we will not use it for unsolicited marketing without your explicit consent.

4. How We Share Your Data

We share your personal data only with the following categories of third parties, and only to the extent necessary:

• Formspree Inc.: Our contact form is processed by Formspree, which receives your form submission data and forwards it to us by email. Formspree acts as a data processor on our behalf. Their privacy policy is available at formspree.io.
• Google LLC: If you accept analytics cookies, your anonymised usage data is processed by Google Analytics 4. Google acts as a data processor. IP anonymisation is enabled. Google's privacy policy is available at policies.google.com.
• Netlify Inc.: Our Website is hosted on Netlify, which processes technical data (including IP addresses) as part of hosting and content delivery. Netlify's privacy policy is available at netlify.com.

All third-party processors are required to handle your data in accordance with applicable data protection law.

5. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected:

• Contact form submissions: Retained in our email systems for up to 3 years, or until the enquiry is resolved, whichever is sooner.
• Analytics data: Retained by Google Analytics for up to 14 months, in line with our GA4 data retention settings.
• Cookie consent records: Stored in your browser for 12 months.

6. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate or incomplete data.
• Right to erasure: You may ask us to delete your personal data in certain circumstances.
• Right to restrict processing: You may ask us to limit how we use your data.
• Right to object: You may object to our processing of your data where we rely on legitimate interests.
• Right to data portability: Where processing is based on consent or contract, you may request your data in a portable format.
• Right to withdraw consent: Where processing is based on consent (e.g. analytics cookies), you may withdraw consent at any time by clearing your cookies or adjusting your browser settings.

To exercise any of these rights, please contact us via our contact form. We will respond within one calendar month.

You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), if you believe we have not handled your data lawfully.

7. Cookies

Our Website uses cookies — small text files stored on your device. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Website to function. These include your cookie consent preference. No consent is required for these.
• Analytics cookies (optional): Set by Google Analytics 4 to collect anonymised data about how you use the Website. These are only set if you click "Accept All" on the cookie banner. You may decline or withdraw consent at any time.

We do not use advertising, targeting, or social media cookies.

You can manage or delete cookies at any time through your browser settings. Please note that disabling cookies may affect the functionality of some websites.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Our Website is served over HTTPS (TLS encryption). Access to contact form submissions is restricted to authorised personnel only.

However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

9. International Transfers

Some of our third-party processors (including Google and Formspree) may transfer data outside the UK or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK ICO or equivalent mechanisms.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us via our contact form or in writing to:

GCH Corporation Ltd
2 Castle Business Village, Station Road
Hampton, Middlesex, TW12 2BX
England