Legal

Privacy policy

How we collect, use and protect your personal data, in line with UK data protection law.

Placeholder document. This is a boilerplate privacy policy to establish structure. Before launch, replace the bracketed details, confirm what data you actually collect and which processors you use, and have it reviewed for your circumstances. It is not legal advice.

Last updated: [date]

1. Who we are

This website is operated by After the Rain (“we”, “us”, “our”), an AI agency based in the south of England. For the purposes of UK data protection law, we are the data controller for the personal data described in this policy.

[Registered/trading name], [address]. [Company number, if applicable]. ICO registration number: [number, if applicable].

2. The information we collect

We only collect what we need. Depending on how you interact with us, that may include:

  • Contact details you give us — such as your name, email address, organisation and the content of any message you send through our contact form or by email.
  • Correspondence — records of communications between us, so we can manage our relationship and respond to enquiries.
  • Technical and usage data — limited information collected automatically when you visit, such as your browser type and pages viewed, where analytics or server logs are in use.

3. How and why we use it

We use your personal data to:

  • respond to your enquiries and provide the services you ask for;
  • manage and administer our working relationship;
  • operate, maintain and improve this website; and
  • meet our legal and regulatory obligations.

Our lawful bases for processing are typically consent (for example, when you choose to contact us), legitimate interests (running and improving our business in a way that respects your rights), and contract (where we are providing services to you), and legal obligation where applicable.

4. Cookies and analytics

This website aims to use only what is necessary to function. If we add analytics or other non-essential cookies, we will update this policy and, where required, ask for your consent first. [Describe any cookies or analytics tools actually used, e.g. Plausible, Google Analytics, etc.]

5. Sharing your information

We do not sell your personal data. We may share it with trusted service providers who help us operate (for example, email, hosting or form-handling providers), all of whom are required to protect it and use it only on our instructions. We may also disclose information where required by law. [List key processors once confirmed.]

6. International transfers

Some of our providers may process data outside the UK. Where that happens, we take steps to ensure an appropriate level of protection, such as relying on adequacy regulations or standard contractual clauses.

7. How long we keep it

We keep personal data only for as long as we need it for the purposes set out above, or to meet legal and accounting requirements, after which it is securely deleted or anonymised.

8. Your rights

Under UK data protection law you have rights to access your data, to have inaccurate data corrected, to have data erased in certain circumstances, to restrict or object to processing, and to data portability. To exercise any of these, please contact us using the details below.

9. Complaints

We hope to resolve any concern directly. You also have the right to complain to the UK’s supervisory authority, the Information Commissioner’s Office (ICO), at ico.org.uk.

10. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, with the date it was last updated shown above.

11. Contact us

For any privacy questions or to exercise your rights, email hello@aftertherain.uk or write to us at [postal address].