Privacy, in plain English.

Who is responsible for your information

GS Chisholm, trading as Geesc Online, is the controller of the personal information described in this notice.

You can use these details to ask a privacy question or make a request.

Information I may handle

If you email me, I receive the information you choose to include, such as your name, email address, business details and the contents of your message.

If you are given access to the private client area, it may also hold your account email address, project details and messages relating to our work. Please do not send sensitive personal information unless it is genuinely necessary and we have agreed how it should be handled.

The public portfolio does not use an enquiry form, advertising trackers or analytics cookies.

Why and how I use it

I do not use information from enquiries for automated decision-making or sell it to anyone.

Who it may be shared with

I use service providers where they are needed to run the practice, including email, website hosting and secure client-area hosting and authentication. The client area currently uses Supabase. These providers process information on my behalf under their own security and data-protection commitments.

I may also disclose information where the law requires it, to professional advisers, or where necessary to establish, exercise or defend legal rights. I do not sell personal information.

Some providers may process information outside the UK. Where this happens, I require an appropriate legal safeguard for the transfer, such as UK adequacy regulations or approved contractual protections. You can ask for more information using the email address above.

How long it is kept

I keep an enquiry only for as long as needed to reply and manage reasonable follow-up, normally no longer than 12 months after our last contact. If you become a client, relevant correspondence and project records may be kept for the duration of the relationship and afterwards where needed for tax, accounting, contractual or legal purposes.

Retention may be extended if there is an unresolved dispute or a legal requirement. Information that is no longer needed is deleted or anonymised.

Cookies and similar technology

The public portfolio does not set analytics or advertising cookies. If you sign in to the client area, the site uses strictly necessary authentication cookies to keep you securely signed in and refresh your session. These cookies are not used to track you for advertising, and the client login cannot work properly without them.

Your data-protection rights

Depending on the circumstances, you may have rights to ask for access to your information, correction, deletion, restriction, portability, or to object to its use. In particular, you have the right to object where I rely on legitimate interests. These rights are not absolute and exemptions can apply.

Email projects@geesc.online to make a request. I may need to confirm your identity first and will normally respond within one month.

If you are unhappy with how your information is handled, please contact me first so I can try to resolve it. You also have the right to complain to the Information Commissioner’s Office ↗.