Privacy Policy – Milestone Year

Scope of Application

This Privacy Policy explains how Milestone Year,(“we”, “us”, “our”) collects, uses, and protects your personal data when you use our website www.milestoneyear.com

1. Who We Are

Company Name: Milestone Year
Registered Address: 128 City Road London EC1V 2NX
Email: info@milestoneyear.com
Website: www.milestoneyear.com

We are the data controller for the purposes of UK data protection law.

2. What Personal Data We Collect

We may collect and process the following information:

Name
Email address
Telephone number (if provided)
Company name and job title (if provided)
Information submitted through contact or enquiry forms
Communication preferences
Website usage data (via cookies and analytics)

We do not collect sensitive personal data such as passport details, National Insurance numbers, health information, or financial information.

3. How We Collect Your Data

We collect personal data when you:

Complete forms on our website
Contact us by email or phone
Subscribe to our communications
Engage with our services
Browse our website (via cookies and analytics tools)

4. How We Use Your Data

We use your personal data to:

Respond to enquiries
Provide our services
Manage client relationships
Send relevant communications and updates
Improve our website and services
Meet legal and regulatory obligations

We only use your data for legitimate business purposes.

5. Legal Basis for Processing

Under UK GDPR, we process your data on the following lawful bases:

Consent – where you have given clear permission
Contract – where processing is necessary to deliver services
Legitimate Interests – to operate and grow our business
Legal Obligation – where required by law

6. Marketing Communications

We may send you information about our services where:

You have opted in, or
We have a legitimate business relationship

You may unsubscribe at any time by following the link in our emails or contacting us directly.

7. Sharing Your Data

We may share your data with trusted third parties, including:

IT and website hosting providers
CRM and email marketing platforms
Professional advisers (legal, accounting, compliance)

All third parties are required to process your data securely and in accordance with the law.

We do not sell your personal data.

8. International Data Transfers

Some of our service providers may store data outside the UK.

Where this happens, we ensure appropriate safeguards are in place in line with UK GDPR requirements.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

Secure servers
Access controls
Encrypted communications where appropriate
Regular system monitoring

However, no online system is completely secure, and we cannot guarantee absolute security.

10. Data Retention

We retain personal data only for as long as necessary for:

The purposes for which it was collected
Legal, regulatory, or accounting requirements

When data is no longer required, it is securely deleted

11. Your Data Protection Rights

You have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data
Restrict processing
Object to processing
Request data portability
Withdraw consent at any time

To exercise these rights, please contact us using the details above.

12. Cookies

Our website uses cookies to improve functionality and analyse usage.

For more information, please see our Cookie Policy.

13. Third-Party Links

Our website may contain links to external websites.

We are not responsible for the privacy practices of those websites.

14. Changes to This Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page with an updated revision date.

15. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

We encourage you to contact us first so we can try to resolve any concerns.

Socials