1. Introduction
Stellar Returns ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website stellar-returns.com or use our services.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
2.1 Personal Information
We may collect the following types of personal information:
- Contact Information: Name, email address, phone number, postal address
- Business Information: Company name, job title, business requirements
- Project Information: Project details, budget, timeline, technical requirements
- Communication Records: Correspondence via email, phone, or contact forms
2.2 Technical Information
We automatically collect certain technical information when you visit our website:
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, time spent on pages, referral sources
- Cookies: As described in our Cookie Policy
3. How We Use Your Information
We use your personal information for the following purposes:
- Service Provision: To provide web development services and respond to enquiries
- Communication: To communicate about projects, send updates, and provide support
- Business Operations: To manage our business relationship and fulfil contractual obligations
- Marketing: To send relevant marketing communications (with your consent)
- Legal Compliance: To comply with legal obligations and protect our rights
- Website Improvement: To analyse website usage and improve our services
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: Where you have given clear consent for specific processing activities
- Contract: Where processing is necessary for contract performance
- Legitimate Interests: Where processing is necessary for our legitimate business interests
- Legal Obligation: Where processing is required by law
5. Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With trusted third-party service providers who assist in our operations
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Consent: With your explicit consent for other purposes
5.1 Third-Party Services
We may use the following third-party services:
- Web Hosting: For website hosting and performance
- Analytics: For website analytics and performance monitoring
- Email Services: For communication and marketing
- Payment Processors: For secure payment processing
6. Data Security
We implement appropriate technical and organisational measures to protect your personal information:
- Encryption: Data in transit and at rest is encrypted
- Access Controls: Limited access to personal data on a need-to-know basis
- Security Monitoring: Regular security assessments and monitoring
- Staff Training: Regular data protection training for our team
- Incident Response: Procedures for data breach notification and response
7. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services and fulfil contractual obligations
- Comply with legal, accounting, or reporting requirements
- Resolve disputes and enforce our agreements
Generally, we retain:
- Client Data: For the duration of the business relationship plus 7 years
- Marketing Data: Until consent is withdrawn or 3 years of inactivity
- Website Analytics: Up to 26 months
8. Your Rights
Under UK GDPR, you have the following rights:
- Right of Access: Request copies of your personal data
- Right of Rectification: Request correction of inaccurate data
- Right of Erasure: Request deletion of your personal data
- Right to Restrict Processing: Request limitation of processing
- Right to Data Portability: Request transfer of your data
- Right to Object: Object to processing based on legitimate interests
- Rights Related to Automated Decision Making: Including profiling
To exercise these rights, please contact us using the details provided below. We will respond within one month of receipt of your request.
9. Cookies
Our website uses cookies to improve your browsing experience. For detailed information about our use of cookies, please see our Cookie Policy.
You can manage your cookie preferences through our cookie management system or your browser settings.
10. International Data Transfers
Where we transfer your personal data outside the UK, we ensure appropriate safeguards are in place:
- Adequacy Decisions: Transfers to countries with adequate protection
- Standard Contractual Clauses: Approved contractual protections
- Certification Schemes: Recognised certification frameworks
11. Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to registered users
- Displaying a prominent notice on our website
Your continued use of our services after any changes constitutes acceptance of the updated policy.
13. Contact Information
If you have any questions about this Privacy Policy or our data practices, please contact us:
14. Supervisory Authority
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):