Privacy notice

Who we are

This notice explains how The Benison Group (“we”, “us”) handles the personal information you give us through this website, www.thebenisongroup.com. We decide how and why that information is used, which makes us its controller under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Company number: TBC.

To contact us about this notice or your information, email hello@thebenisongroup.com.

What we collect

Information you give us

When you send us an enquiry, the form asks for:

• your name and email address;
• your business name, if you choose to give it;
• your message.

Please don’t include sensitive information, such as details of your health, in your message.

Technical information when you visit

Whenever you visit this website, whether or not you send an enquiry, your browser sends our hosting provider, Vercel, the technical information needed to deliver each page, such as your IP address, the page requested and your browser type. Vercel uses it to deliver and protect the website, and records some of it in logs of requests to the site (see “How long we keep it”). We don’t use it to identify you or to follow you across other websites.

Keeping the form free of spam

The form records when the page was opened and includes a hidden field that people don’t see. When you send it, our server also checks your IP address to stop repeated submissions. Our server holds the address in its working memory for this check for up to ten minutes and doesn’t write it to any database or file. This check is separate from the request logs Vercel keeps.

How we use it and why

We use your enquiry to read and reply to it, and, if you’d like to work with us, to discuss that work with you. Our lawful basis is our legitimate interests in responding to people who contact us and in developing our business. Where you ask about working with us, we also handle your information to take steps you’ve asked for before entering into a contract with you.

We use technical information, through Vercel, to deliver the website, keep it secure and prevent misuse of the form. Our lawful basis is our legitimate interests in running a reliable, secure website.

You don’t have to give us your information, but without your name, email address and message we can’t reply to your enquiry.

Who handles it for us

Your enquiry passes through these service providers, which handle it on our behalf and under contract with us:

• Vercel hosts this website and runs the enquiry form;
• Resend delivers your enquiry to our team by email;
• Google Workspace hosts our email.

Your enquiry reaches us with your email address set as the reply-to address, so our reply comes straight to you. We don’t share your information with anyone else unless the law requires us to.

Information processed outside the UK

These providers process information in the United States, and Google may process it in other countries where it operates. Each transfer is covered by safeguards recognised under UK data protection law, set out in the provider’s data processing terms:

• Vercel: the UK International Data Transfer Addendum, with standard contractual clauses;
• Resend: the UK Extension to the EU-US Data Privacy Framework, and standard contractual clauses with the UK Addendum;
• Google: standard contractual clauses with the UK Addendum.

How long we keep it

Your enquiry

Your enquiry reaches us as an email in our Google Workspace mailboxes. We keep it only for as long as we need it for the purposes above. If we go on to work together, we keep it for as long as that relationship lasts and afterwards for as long as we need to meet our legal, tax and accounting obligations or to deal with any claim. Otherwise, we delete it once we no longer need it to respond to you.

Records kept by our providers

Our providers keep their own records for limited periods, under their published terms:

• Vercel logs requests to the website, which can include your IP address and browser details. Vercel’s documentation gives one day as the standard log retention for our plan. If an enquiry can’t be sent, our server adds a short error report to these logs so we can fix the problem.
• Resend keeps a copy of each email it delivers, including its content, together with delivery records. Resend’s documentation gives 30 days for this on its standard plans.

Cookies and tracking

This website doesn’t set cookies, doesn’t store information in your browser and doesn’t use analytics, advertising or other tracking tools. Every page and file loads from our own website address.

Other websites

Links to Instagram, LinkedIn and the websites of businesses we’ve worked with take you to sites we don’t control. Their own privacy notices apply.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that’s wrong or incomplete;
• ask us to delete your information;
• ask us to restrict how we use it;
• object to our using it on the basis of our legitimate interests;
• ask for information you gave us in a portable format, where that applies.

To make a request, email hello@thebenisongroup.com. You don’t usually have to pay, and we’ll respond within one month.

How to complain

If you’re unhappy with how we’ve handled your information, please tell us first so we can try to put it right.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint (opens in a new tab), or call 0303 123 1113.

Changes to this notice

If we change how we handle personal information, we’ll update this notice and the date at the top.