Effective Date: 18th March 2025

1. INTRODUCTION

Node Zero (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This privacy notice explains how we collect, use, store, and share your personal data when you visit our website, https://www.exceptionalspaces.co.uk/, and outlines your privacy rights and how the law protects you. By using our site and submitting personal data, you agree to the terms of this privacy policy.

2. IMPORTANT INFORMATION AND WHO WE ARE

2.1 Controller

Node Zero (Company No. 05695100), registered at Unit 3 Oswin Road, Leicester, England, LE3 1HR, is the data controller responsible for your personal data.

2.2 Changes to the Privacy Policy

We may update this privacy notice periodically. Any significant changes will be communicated via email or on our website. Please review this policy regularly to stay informed.

2.3 Third-Party Links

Our website may contain links to third-party websites, plug-ins, and applications. We do not control these third parties and are not responsible for their privacy policies. Clicking on those links may allow third parties to collect your data.

3. DATA WE COLLECT ABOUT YOU

Personal data refers to any information that can identify an individual. We may collect, use, store, and share different types of personal data, including:

• Identity Data: Name, job title, and business details.
• Contact Data: Email address, phone number, and business address.
• Usage Data: Information on how you use our website.
• Marketing and Communications Data: Preferences for receiving marketing.
• Aggregated Data: Statistical or demographic data derived from your personal data but does not directly identify you.

We do not collect Special Category Data (e.g., health, racial, religious data) unless explicitly required and with your consent.

4. HOW WE COLLECT YOUR DATA

We collect personal data in various ways, including:

• Directly from you (e.g., when you contact us or sign up for newsletters).
• Automatically through website usage (e.g., via cookies).
• From third-party sources where applicable.

5. HOW WE USE YOUR DATA

We will only process your data where legally permitted, including:

• Where you have given explicit consent.
• To fulfil a contract with you.
• Where necessary for our legitimate business interests.
• To comply with a legal obligation.

5.1 Purpose of Processing

We process your personal data for:

• Managing and administering our business relationship with you.
• Providing services, including marketing and advisory support.
• Improving our website and services.
• Monitoring compliance with policies and legal obligations.

If you have provided explicit consent, we may also process your data for:

• Marketing communications and promotions.
• Customer feedback and market research.

6. MARKETING AND OPTING OUT

You may receive marketing messages if you have opted in or have an existing business relationship with us. You can opt out at any time by contacting us. Opting out will not affect transactional communications.

7. COOKIES

We use cookies to enhance user experience and analyse website usage. Our Cookie Policy provides details on managing cookie preferences. Disabling cookies may impact website functionality.

8. DATA SECURITY

We implement appropriate security measures to prevent unauthorized access, use, or disclosure of your data. We restrict access to personal data to employees, contractors, and third parties who require it for legitimate business purposes.

9. DATA RETENTION

We retain your personal data only as long as necessary to fulfil the purposes for which we collected it, including legal and regulatory requirements. In some cases, we may anonymise data for research or statistical purposes.

10. YOUR LEGAL RIGHTS

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data.
• Correction: Request corrections to inaccurate or incomplete data.
• Erasure: Request deletion of your data under certain conditions.
• Restriction: Request limitation of processing your data.
• Objection: Object to data processing for direct marketing or legitimate interests.
• Data Portability: Request transfer of your data to another provider.

To exercise these rights, contact us at [email address]. We may require identity verification.

11. DISCLOSURES OF YOUR PERSONAL DATA

We may share your data with:

• Internal Third Parties: Other companies within our group.
• External Third Parties: Service providers, professional advisers, and business partners.
• Regulators and Law Enforcement: Where legally required.
• Business Transfers: If we merge, sell, or acquire businesses.

All third parties are required to respect data security and process personal data only as instructed by us.

12. INTERNATIONAL TRANSFERS

We do not transfer your personal data outside the UK or EEA unless adequate safeguards are in place to ensure compliance with data protection laws.