Think Systems is committed to providing quality services while respecting your privacy. This policy outlines our ongoing obligations regarding the collection, use, and protection of your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What is Personal Data and Why Do We Collect It?
Personal data refers to any information that identifies an individual. Examples include:

• Name, address, email address, phone number.
• Technical data such as IP address and browser type (collected via cookies).

We collect personal data for the primary purpose of providing our services, client communications, and marketing.

Legal Basis for Processing Personal Data
Under UK GDPR, we process your data based on:

• Consent – When you subscribe to marketing emails.
• Contractual necessity – To fulfil service agreements.
• Legitimate interests – For business improvements and analytics.
• Legal obligations – To comply with UK regulations.

Sensitive Personal Data
We may collect sensitive data (e.g., racial or ethnic origin, trade union membership, health data) only when:

• Explicit consent is provided.
• It is necessary for contractual or legal obligations.
• It is required by law.

Data Sharing and Third Parties
We do not sell your personal data. However, we may share it with:

• Service providers (e.g., IT support, payment processors).
• Legal authorities if required by law.
• Third parties with your consent.

All third parties handling your data must comply with UK data protection laws.

International Data Transfers
Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

• UK-approved Standard Contractual Clauses (SCCs).
• Data protection agreements with non-UK entities.

Data Retention
We retain personal data for as long as necessary to fulfil its purpose. Generally, client-related data is stored for a minimum of seven years. You may request deletion, subject to legal requirements.

Your Data Protection Rights
Under UK GDPR, you have rights to:

• Access – Request a copy of your data.
• Rectification – Correct inaccurate data.
• Erasure – Request deletion of your data.
• Restrict processing – Limit how your data is used.
• Data portability – Request data transfer to another service.
• Object – Opt out of certain data uses.

To exercise these rights, contact info@thinksystemsgroup.co.uk.

Cookies and Tracking
We use cookies to enhance user experience. These may include:

• Essential cookies – Required for website functionality.
• Analytics cookies – Used to improve our website.
• Marketing cookies – Used for personalised ads.

You can manage cookie settings in your browser or via our Cookie Policy.

Data Security
We take appropriate measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Security measures include:

• Secure data storage systems.
• Encryption and access controls.
• Regular data protection assessments.

Updates to This Policy
This policy may be updated from time to time. The latest version will always be available on our website.

Contact Information and Complaints
If you have any questions or complaints about this Privacy Policy, please contact:

Think Systems
Email: info@thinksystems.com

If you are dissatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.