Privacy Notice

Who we are (the data controller)

Parrish Projects ("we", "us", "our") is a systems studio based in Guernsey, Channel Islands. For the purposes of The Data Protection (Bailiwick of Guernsey) Law, 2017 ("the Law"), Parrish Projects is the data controller for the personal data you submit through this website. We do not have, and are not required to appoint, a separate data protection officer.

If you have any question about this notice or about your personal data, contact us at lewis@parrishprojects.com.

What personal data we collect

We only collect the personal data you actively give us. When you fill in the contact form, that is your name, your email address, and any details you choose to write in your message, such as your budget range, timeline, what you need, and how you prefer to be contacted.

This is a static website. We do not set first-party advertising or tracking cookies, we do not run analytics, and we do not build a behavioural profile of you. None of the data we ask for is "special category" data (for example data about your health, race, religion, or political views), and you should not send us sensitive personal information through the form.

How and why we use your personal data

We use the information you send us only to handle your enquiry, specifically:

• to read and respond to your enquiry;
• to discuss whether and how we can help with your project, and to give you an estimate or proposal;
• to keep a record of our correspondence so we can follow up properly.

Our lawful basis for using it

The Law requires us to have a valid "condition for processing" (a lawful basis) under Schedule 2 of the Law before we use your personal data. For your contact-form enquiry we rely on the following conditions:

Legitimate interests: processing is necessary for our legitimate interest in receiving and responding to enquiries about our services and running our studio. We have considered your interests and rights and do not believe this processing overrides them, because you have chosen to contact us and we only use the data to reply.

Your request / steps before a contract: where you are asking us to take steps with a view to working together, processing your enquiry is also necessary for steps taken at your request before entering into a contract.

Where we ever rely on your consent for something, you can withdraw that consent at any time by emailing us, and we will stop. Withdrawing consent does not affect anything we did before you withdrew it.

Who we share it with

We do not sell your personal data, and we will never use it for unrelated marketing. We only share it with the service providers ("processors") that help us receive and read your message, and only so they can do that:

• FormSubmit (formsubmit.co): the form provider that delivers your message from the website to our email inbox.
• Our email provider: stores your message so we can read and reply to it.

Where your data is processed (international transfers)

This website is hosted on GitHub Pages. As with any website, the host may process limited technical request data (such as your IP address) in its server logs for security and delivery; this is standard for serving any web page.

Some of our providers (for example our form and email providers, and the host) may process data on servers outside the Bailiwick of Guernsey, including in the UK, EU or US. Where that happens, we rely on those providers offering appropriate, recognised safeguards for the data, consistent with the requirements of the Law.

How long we keep it

We keep enquiry correspondence only for as long as it is useful: while we are in contact, and for a reasonable period afterwards in case you come back to us. We review what we hold periodically and delete what we no longer need. If you would like us to delete your enquiry and our correspondence sooner, just ask and we will.

Automated decision-making

We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects about you. A real person reads and answers every enquiry.

Do you have to provide it?

Providing your personal data is entirely voluntary; there is no statutory or contractual obligation to contact us. The only consequence of not providing it is that we will not be able to reply to you or take your enquiry forward.

Your rights

Under the Law you have rights over your personal data. In summary, you have:

• the right to be informed about how we use your data (which this notice provides);
• the right of access: to ask for a copy of the personal data we hold about you;
• the right to rectification: to have inaccurate data corrected;
• the right to erasure: to ask us to delete your data;
• the right to restrict our processing of your data;
• the right to data portability: to receive certain data in a reusable format;
• the right to object to our processing, including the right to object to any direct marketing at any time;
• the right not to be subject to a decision based solely on automated processing.

How to make a request or a complaint

To exercise any of your rights, or if you are unhappy with how we have handled your personal data, please email us first at lewis@parrishprojects.com, and we will respond and try to put things right.

You also have the right to complain to the supervisory authority. In Guernsey that is the Office of the Data Protection Authority (ODPA). You can contact the ODPA at odpa.gg, by email at enquiries@odpa.gg, or by phone on +44 (0)1481 742074. If you are in the UK or EU, you may instead contact your local data protection supervisory authority.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed. If we make a significant change, the updated version will always be the one published here.