Privacy & Cookies Policy

Last updated: April 2026

1. Introduction

Modern-Workplace.UK is committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations 2003 (PECR). This policy explains who we are, what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

Please read this policy carefully. By using our website, you acknowledge that you have read and understood its contents.

2. Data Controller

The data controller responsible for your personal information is:

Modern-Workplace.UK

Email: privacy@modern-workplace.uk

If you have questions about this policy or wish to exercise your rights, please contact us at the address above.

3. Personal Data We Collect

We may collect the following categories of personal data:

• Contact data: Name and email address, when you contact us or comment on a blog post.
• Technical data: Your IP address and browser information, collected automatically when you visit our website.
• Communication data: The content of any messages you send us.

We do not knowingly collect sensitive personal data (special category data under UK GDPR).

4. Lawful Basis for Processing

UK GDPR requires us to have a valid lawful basis for each processing activity. We rely on the following:

• Responding to enquiries and administering the website — Legitimate interests (Article 6(1)(f)): Processing your IP address and technical data to maintain website security, prevent abuse, and improve site performance. We have assessed that this processing does not override your privacy interests.
• Marketing communications — Consent (Article 6(1)(a)): Where you have actively provided your information to contact us or subscribe to communications.
• Legal compliance — Legal obligation (Article 6(1)(c)): Where we are required to process or retain data to comply with applicable law.

5. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your enquiries and provide the services or information you have requested.
• To administer and improve our website, including monitoring for security incidents and technical faults.
• To send you communications you have opted in to receive.
• To comply with our legal and regulatory obligations.

6. Cookies and Similar Technologies

What are cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your browser and remember certain information.

Cookies we use

• Strictly necessary cookies: These are essential for the website to function correctly (e.g. session management). They do not track you across other sites and cannot be disabled without affecting site functionality.

We do not use advertising cookies, third-party tracking cookies, or profiling cookies.

Analytics

If we use any analytics tool (e.g. to understand aggregate page traffic), we ensure this is done using anonymised or aggregated data only and in compliance with PECR. No individual user is identified or tracked across sessions.

Your cookie choices

You can control and delete cookies through your browser settings. Please be aware that disabling strictly necessary cookies may affect the functionality of this website. For more information, visit www.aboutcookies.org.

7. Sharing of Your Information

We do not sell, trade, or rent your personal information to third parties.

We may disclose your information in the following limited circumstances:

• To our hosting or infrastructure providers, who process data on our behalf under appropriate data processing agreements.
• Where we are required to do so by law, court order, or at the request of a regulatory authority.
• To protect the rights, property, or safety of Modern-Workplace.UK, our users, or others.

8. International Data Transfers

Where any of our service providers or hosting infrastructure is located outside the United Kingdom, we ensure that appropriate safeguards are in place before transferring your data. These may include UK adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms approved by the ICO.

9. Data Retention

We retain personal data only for as long as is necessary for the purposes set out in this policy, or as required by law. In practice:

• Enquiry and contact data is retained for up to 2 years from the date of last contact.
• Technical logs (including IP addresses) are retained for up to 90 days for security purposes.
• Where you have subscribed to communications, we retain your data until you unsubscribe.

When data is no longer required, it is securely deleted or anonymised.

10. Security of Your Information

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include secure hosting, access controls, and regular security reviews.

Whilst we take reasonable precautions, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, inform affected individuals without undue delay.

11. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access: To obtain confirmation of whether we hold personal data about you and to request a copy.
• Right to rectification: To have inaccurate data corrected or incomplete data completed.
• Right to erasure: To request that we delete your personal data where there is no compelling reason to continue processing it.
• Right to restriction: To ask us to restrict processing of your data in certain circumstances (e.g. while accuracy is contested).
• Right to data portability: To receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller, where processing is based on consent or contract.
• Right to object: To object to processing based on legitimate interests, direct marketing, or profiling.
• Right to withdraw consent: Where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@modern-workplace.uk. We will respond within one calendar month. We will not charge a fee for reasonable requests, but may charge or refuse manifestly unfounded or excessive requests.

12. Right to Complain to the ICO

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK’s supervisory authority:

Information Commissioner’s Office (ICO)

Website: www.ico.org.uk

Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you approach the ICO. Please contact us in the first instance.

13. Children’s Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child under 13, please contact us immediately and we will delete it.

Users aged 13–17 may use our website, but we recommend parental or guardian supervision.

14. Changes to This Policy

We review this policy periodically and may update it to reflect changes in our practices or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy regularly.

15. Contact Us

If you have any questions, concerns, or requests regarding this policy or our handling of your personal data, please contact us:

Email: privacy@modern-workplace.uk

We aim to respond to all enquiries within 5 working days.

This policy is governed by the laws of England and Wales. It was prepared with reference to the UK GDPR, the Data Protection Act 2018, and PECR.