PRIVACY POLICY

This Privacy Policy describes how Sorsco ("we", "us", or "our") collects, uses, and protects your personal information when you visit our website or use our services.

Last Updated: 23 December 2025

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you:

• Fill out our contact form (name, email, company, telephone, message)
• Subscribe to our newsletter or communications
• Request quotes or information about our services
• Communicate with us via email or phone

1.2 Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referral source and exit pages
• Usage data through Google Analytics

2. How We Use Your Information

We use your information to:

• Respond to your inquiries and contact requests
• Provide quotes and information about our services
• Improve our website and user experience
• Send marketing communications (with your consent)
• Comply with legal obligations
• Prevent fraud and ensure website security
• Analyze website traffic and usage patterns

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., responding to inquiries)
• Legal Obligation: Processing is necessary to comply with the law

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience:

Google Analytics

We use Google Analytics to understand how visitors use our website. This helps us improve our content and services. Google Analytics uses cookies to collect information such as:

• Number of visitors and their geographic location
• Pages viewed and navigation patterns
• Time spent on each page
• Device and browser information

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

5. Data Sharing and Third Parties

We do not sell your personal information. We may share your data with:

• Service Providers: Google Analytics, email service providers, and hosting services
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (SSL/TLS)
• Secure server infrastructure
• Rate limiting to prevent abuse
• Spam detection on contact forms
• Regular security assessments
• Access controls and authentication

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: Up to 3 years from last contact
• Marketing communications: Until you unsubscribe
• Analytics data: As per Google Analytics retention settings
• Legal compliance: As required by applicable laws

8. Your Rights

Under GDPR and UK data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (right to be forgotten)
• Restriction: Limit how we use your data
• Portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at [email protected]

9. International Data Transfers

Your data may be transferred to and processed in countries outside the UK/EEA, including the United States (Google Analytics). We ensure appropriate safeguards are in place through:

• Standard Contractual Clauses
• Adequacy decisions
• Service provider certifications

10. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes

We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

13. Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):