Privacy policy.

Square Peg Development Ltd. is committed to respecting the privacy rights of all visitors to ourwebsite. We comply with data protection laws at all times and have set out this Privacy Notice toexplain what personal data we collect, why we collect it, how we protect it and explain your rights.

Personal data we collect

We collect the following data about you:

• your name, e-mail address, contact details and communication preferences when you completeforms on our website;•

• your online browsing activities, your IP address (computer internet address) and yourapproximate location (as determined by your IP address) in conjunction with Google Analytics (more details below).Our website is not intended for use by children and as such we do not knowingly collect data relatingto children.

How we protect your data

We are committed to keeping your data secure. We use encryption for web traffic to and from ourwebsite and we store any data provided over our website in secure computer systems that onlyauthorised staff have access to. Our data is backed up and we have secure systems in place to prevent hackers, viruses and similar from accessing our systems and data. We also have a range of policies and procedures with ongoing training, to ensure your data is kept safe and only used inaccordance with this Privacy Notice.

How we use your data

We use your data for four reasons:

• to provide information, support and services to you;

• to manage customer service interactions with you;

• to subscribe you to our mailing list and send you relevant information by e-mail;

• to analyse how our website is used, so that we can improve it and report anonymised visitornumbers and analysis for performance reporting and to funders.

When and how we might share your data. We will never sell your personal data. We share limited data for limited purposes. There are three different sets of data sharing involving personal data collected through our website:

1. Cookie/visitor behaviour-we share this information with Google Analytics (see further detailsbelow);

2. Contact information you provide for our mailing list-we share this information with MailChimp,the third-party mailing list software we use. Their privacy policy can be accessed here

3. Contact information you provide to seek help/support/information/provide feedback/make acomplaint-we store this in computer systems provided by third parties for processing, storage and archive purposes. We use Microsoft to provide technical support. Theagreement we have in placewith them prevents them from using your personal data for any purpose.

How long we keep your data

We only keep your data for as long as we need to. More specifically:

•website visitor data (Google Analytics)-we will retain your data for 24months;

•mailing list subscription-we will retain this data until you unsubscribe from our mailing list (everymailing list e-mail you receive from us will have a link allowing you to easily unsubscribe);

•customer enquiry information-we will retain this for not more than 2 years after you last contacted us-we only keep data for the current financial year and the previous financial year.

Transferring data outside of the European Economic Area (EEA)

We are required to tell you if we transfer data outside of the EEA.

Legal basis for using your data

We generally rely on your consent to use your personal data in relation to monitoring website usageand sending you direct e-mails through our mailing list, or providing customer care, information orsupport should you choose to contact us directly through our website.

We also process your data because it is in our legitimate interests that we do so, namely:

•promoting, marketing and advertising our products and/or services;

•sending information to you by e-mail or text message about our products and/or services;

•understanding the behaviour of visitors to our website so that we can improve our website and/orthe products and/or services we provide;

•protecting the Organisation and clients/customers by taking appropriate legal action against thirdparties who have committed criminal acts

•fulfilling our duties to our customers/clients.

Cookies

We use cookies on our website to collect information from visitors. We collect information on pagesviewed. We use Google Analytics, so Google Inc. is a data processor-they process your personal data so thatwe can understand how visitors access and use our website. Click here for full details on Google'sPrivacy Policy.

Your legal rights

You have the following rights:

• the right to ask what personal data we hold about you;

• the right to ask us to update and correct any out-of-date or incorrect personal data that we holdabout you;

• the right to opt out of any marketing communications that we may send you.

To exercise any of the above rights please contact Frances McAulay.

You also have the right to lodge a complaint with the Information Commissioner's Office (the supervising authority for dataprotection in the UK). To do that please visit their website athttps://ico.org.uk/concerns/

Reviewing and changing how we use data

This privacy notice was last updated on 24.9.2023.

We regularly review our use of personal data to ensure that what we do continuesto be fair,transparent, safe and legal. As an organisation we sometimes change software or technologies, orhow we work, and this may result in us changing what data we collect and/or how we use it. We willonly use your data for the purposes set out above. If we want to use your data for any other purposewe will contact you and seek your express permission before we conduct any such processing.

We will always seek to minimise the amount of data we collect and use, and to only keep it for aslong as weneed to.

Whenever any change is made to how we collect or use personal data we will update this Privacy Notice and any other relevant policies.

How to find out more or to make a complaint.

We've endeavoured to make this Privacy Notice clear, informative and understandable, but if it is not then please contact us and we shall provide further information as required. We will also look toimprove the wording of this Privacy Notice, based on feedback.

To provide feedback, ask for more details or to make a complaint about our collection or use of yourpersonal data then please contact Frances McAulay.

You can also complain to the Information Commissioner's Office in the UK-please visit their websiteto see how you can do that.