Privacy Policy

Last Updated: 08/06/2026

1. Introduction

Welcome to Burnt Grove. Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or engage with our services.By using our website or getting in touch, you consent to the collection and processing of your personal data as outlined in this policy.

2. Data We Collect

2.1 Information You Provide

Contact Information: Your name and email address when you reach out via our contact form or direct correspondence.Business Information: Details about your business, vision, and challenges that you share during initial conversations or engagements.

Communication Data: Emails, messages, or other interactions with us throughout our working relationship.

2.2 Commercially Sensitive Data

We recognise that, as part of our work together, you may share commercially sensitive information about your business, including unreleased strategies, operational details, or brand direction. We treat all such information with the highest level of confidentiality.

By sharing commercially sensitive data, you acknowledge the following:

Confidentiality: We will not disclose your information to third parties, except where required by law.

Limited Access: Only Barnaby Atherton, as the sole principal of Burnt Grove, will have access to your data.

Data Protection: We will take all reasonable steps to safeguard your information, including secure storage and responsible handling.

2.3 Automatically Collected Data

Technical Data: IP address, browser type, device information, and usage patterns collected via cookies and analytics tools.

Usage Data: Information about how you interact with our website.

2.4 Third-Party Data

We may receive limited data from analytics providers to help us understand how our website is used and improve its performance.

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to enquiries and manage our working relationship.

To communicate with you regarding our services and any relevant updates.

To improve our website using analytics and feedback.

To comply with legal obligations.

4. Legal Basis for Processing

We only process personal data when we have a legal basis to do so, including:

Contractual Necessity: When processing is required to deliver our services.

Legitimate Interests: To improve our services and maintain security.

Consent: When you explicitly opt in to receive communications from us.

Legal Obligations: When required by law.

5. Data Sharing & Third Parties

We do not sell or trade your personal data. We may share data only with trusted third parties where strictly necessary, including:

Cloud Storage & Hosting Providers: To store and manage business operations securely.

Analytics Providers: To improve our website performance.

Legal & Regulatory Authorities: When required to comply with legal obligations.

All third parties are required to adhere to strict data protection standards.

6. Data Storage & Retention

We retain personal data only for as long as necessary:

Enquiry & Communication Data: Stored for up to 2 years for reference and service improvement.

Client Engagement Data: Stored for up to 6 years after the conclusion of an engagement for legal and tax purposes.

Technical Data: Retained for up to 12 months for website analytics.

7. Your Rights

Under UK GDPR, you have the following rights:

Access: Request a copy of your personal data.

Correction: Rectify inaccurate or incomplete data.

Deletion: Request deletion of your data, subject to legal obligations.

Objection: Object to data processing based on legitimate interests.

Data Portability: Request a structured copy of your data.

To exercise your rights, contact us at barnaby@burntgrove.com. We will respond within 30 days.

8. Cookies & Tracking Technologies

We use cookies to enhance user experience and understand website usage. By continuing to use our site, you consent to cookie usage. You can manage cookie preferences in your browser settings.

9. Data Security

We take security seriously and implement appropriate measures including encryption of sensitive data, access controls, and regular monitoring. However, no system is entirely secure, and data transmission over the internet carries inherent risks.

10. International Data Transfers

If we transfer data outside the UK or EU, we ensure appropriate safeguards are in place, including Standard Contractual Clauses, to maintain data protection standards.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or website notification.

12. Contact Information

For any privacy-related concerns, please contact:

Burnt Grove Email: barnaby@burntgrove.com