Data protection notice / UK
We collect personal information to provide analytics services and respond to enquiries. This notice explains exactly what we do with it and the rights you hold.
Granular Metrics Ltd. follows the UK GDPR and the Data Protection Act 2018 when handling information through this website, our communications and our analytics work.
A practical privacy policy for visitors, enquirers and clients.
This privacy policy applies when you visit our website, send an enquiry, speak with us, become a client or represent an organisation that works with us. It covers information used for website operation, communications, analytics services and service delivery.
Granular Metrics Ltd. is the controller responsible for personal information described here. Our service location is The Roundings, East Hertfordshire, Essex, SG13 7PY, United Kingdom.
We apply the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This is a data protection notice, not a contract for analytics services.
Each category has a defined business purpose and lawful basis.
Your name, work email, telephone number, organisation, role and message help us reply, assess your requirements and arrange a suitable conversation. The lawful basis is legitimate interests, or steps taken at your request before a contract.
Clients may provide reporting goals, operating measures, data sources, user permissions and delivery contacts. We use this information to provide dashboards, predictive analytics, reporting automation and performance monitoring under the contract.
Our systems may record IP address, browser type, device details, pages viewed, referral information and access times. We use this for security, fault finding and aggregated website analysis on the basis of legitimate interests.
We keep correspondence and preferences so we can answer questions, manage an account and send relevant service information. Promotional messages rely on consent where required, and you can withdraw it at any time.
Some information is required to answer an enquiry or deliver an agreed service. If you do not provide it, we may be unable to respond properly or complete the work. We do not use personal information to make solely automated decisions with legal or similarly significant effects.
We keep information for as long as there is a clear reason to keep it.
Enquiry records are normally reviewed after 24 months of no meaningful contact. Client records are kept for the contract period and then reviewed against legal, accounting and dispute needs. Technical logs are kept for a proportionate period suited to security and fault investigation. We securely delete or anonymise information when it is no longer needed.
UK personal data rights are practical rights. We will deal with requests without unnecessary delay.
We use access controls, strong authentication where available, encrypted connections, supplier checks, backups and role-based permissions. Access is limited to people who need it for their work.
We test and review these measures as systems change. No internet service can promise absolute security, so please tell us quickly if you suspect an account or message has been misused.
Contact [email protected] with a question, rights request or concern about how we use your information. Please include enough detail for us to identify the relevant record.
We aim to respond within one month. Complex requests may take longer where the law permits, and we will explain why.
If you remain unhappy, you can complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. Guidance and contact options are available at ico.org.uk.
We may update this policy when our services, suppliers or legal duties change. The version published on this page is the one that applies to current website use and communications.