Privacy Policy

1. Introduction

GRDJ TECHNOLOGY LTD (Company No. 08628197), trading as GRDJ Technology, is committed to protecting your privacy. This policy explains how we collect, use, store, and safeguard your personal information when you visit our website at grdjtechnology.co.uk or engage our services.

We are registered in England & Wales and operate under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For the purposes of data protection law, GRDJ TECHNOLOGY LTD is the data controller.

2. Information We Collect

We may collect the following types of information:

Information you provide directly:

• Contact information (name, email address, phone number) provided through our contact form or email correspondence
• Company name, job title, and project details you share with us
• CVs and application materials submitted through our careers page

Information collected automatically:

• Technical data such as IP address, browser type, operating system, and device information
• Usage data including pages visited, time spent on site, and referral source

3. Lawful Basis for Processing

We process your personal data on the following lawful bases:

• Consent — where you have given us clear consent to process your data for a specific purpose (e.g. subscribing to communications)
• Contract — where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
• Legitimate interest — where processing is necessary for our legitimate business interests, such as improving our website and services, provided your rights do not override those interests
• Legal obligation — where we need to process your data to comply with a legal requirement

4. How We Use Your Information

• To respond to your enquiries and provide requested services
• To manage our contractual relationship with you
• To improve our website, services, and user experience
• To send relevant communications about our services (only with your consent, and you can unsubscribe at any time)
• To comply with legal and regulatory obligations

5. Data Sharing and International Transfers

GRDJ Technology works with a coordinated network of remote developers and specialists who may be located outside the United Kingdom. Where we share personal data with individuals or services outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as standard contractual clauses or adequacy decisions.

We do not sell your personal data to third parties. We may share data with:

• Service providers who assist us in operating our website and delivering services (e.g. hosting, analytics, email delivery)
• Professional advisors (accountants, legal counsel) where necessary
• Law enforcement or regulatory bodies where required by law

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Enquiry data — retained for up to 24 months after our last interaction, unless a contract is entered into
• Client project data — retained for the duration of the project and up to 6 years afterwards for legal and accounting purposes
• CV and application data — retained for up to 12 months unless you request earlier deletion
• Website analytics data — retained in anonymised form

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encrypted communications, secure hosting, access controls, and regular review of our security practices.

8. Cookies

Our website uses essential cookies to ensure proper functionality. We may also use analytics cookies to understand how visitors use our site. These cookies do not identify you personally. You can control cookie preferences through your browser settings. Disabling cookies may affect certain website features.

9. Your Rights

Under UK GDPR, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data where there is no compelling reason to continue processing
• Right to restrict processing — request that we limit the processing of your data in certain circumstances
• Right to data portability — request your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details below. We will respond within one month of receiving your request.

10. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this privacy policy or wish to exercise your data rights, please contact us at: