Privacy Policy

1. Introduction

GoMVP is a trading name of Parr Developments Ltd. We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This privacy policy explains how we collect, use, store, and protect your personal information when you use our website at www.gomvp.co.uk.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

We collect personal information that you voluntarily provide to us when you submit our contact form. This may include:

• Your name
• Your email address
• Your phone number (optional)
• Details about your project or enquiry

Automatically collected data (only if you accept analytics cookies): Where you consent to analytics cookies, Google Analytics 4 collects the following information automatically:

• Pages visited and interactions on the site
• Approximate geographic location (city/region level)
• Device type, operating system, and browser information
• Referral source (how you arrived at the site)
• Session duration and engagement metrics

Your IP address is received by Google but is anonymised before storage and is not accessible to us. If you decline analytics cookies, no automatically collected data is gathered.

4. How We Use Your Information

We use the personal information you provide to:

• Respond to your enquiry or contact request
• Provide you with information about our services
• Communicate with you about potential or ongoing projects
• Fulfil our contractual obligations if you become a client
• Analyse how visitors use the website (where you have accepted analytics cookies) in order to improve content and user experience

5. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Consent (Article 6(1)(a)): By submitting the contact form, you consent to us processing your data to respond to your enquiry.
• Legitimate interest (Article 6(1)(f)): We have a legitimate interest in processing your data to manage business enquiries and provide our services.
• Contractual necessity (Article 6(1)(b)): Where processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract.
• Consent (Article 6(1)(a)) and PECR Regulation 6: Where you accept analytics cookies, we process browsing data via Google Analytics 4 on the basis of your consent. You may withdraw consent at any time (see Section 9).

6. Data Storage & Security

Your personal data submitted via our contact form is stored securely using Supabase, a cloud-hosted database platform. Supabase employs industry-standard security measures including encryption at rest and in transit.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically:

• Contact form submissions are retained for up to 24 months from the date of your last interaction with us.
• If you become a client, your data is retained for the duration of our business relationship and for up to 6 years afterwards for legal and accounting purposes.
• Analytics data collected via Google Analytics 4 is retained for 2 months (event-level data) and 14 months (user-level data) as configured in our GA4 property. Cookie files persist on your device for the durations listed in Section 9.

You may request deletion of your data at any time by contacting us.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request that we correct any inaccurate or incomplete data.
• Right to erasure: You can request that we delete your personal data.
• Right to restriction: You can request that we restrict the processing of your data.
• Right to data portability: You can request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to object: You can object to the processing of your personal data based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you can withdraw your consent at any time. For analytics cookies, you can withdraw consent by clicking "Manage Cookies" in the footer of any page (see Section 9). Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at hello@gomvp.co.uk. We will respond to your request within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

When you first visit our website, a cookie consent banner will appear asking whether you accept analytics cookies. Your preference is stored in your browser's local storage so that you are not asked again on subsequent visits.

If you accept analytics cookies, the following cookies are set by Google Analytics 4:

If you decline cookies, no analytics cookies are set and no browsing data is collected.

Changing your preference: You can change your cookie preference at any time by clicking "Manage Cookies" in the footer of any page. This will clear your stored preference and re-display the consent banner. You can also clear your browser's local storage directly.

Essential local storage: We store a single local storage item (gomvp_cookie_consent) to remember your cookie preference. This is not a cookie and does not track you — it only records whether you accepted or declined analytics cookies.

10. Third-Party Services

We use the following third-party services to process your data:

• Supabase: Used as our database provider to securely store contact form submissions. Supabase acts as a data processor on our behalf and processes data in accordance with their privacy policy and our data processing agreement. Supabase may process data on servers located outside the United Kingdom. Any international transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved under UK GDPR Article 46, ensuring your data receives an equivalent level of protection.
• Google LLC: Provides Google Analytics 4 for anonymised website usage statistics, only where you have consented to analytics cookies. Google acts as an independent data controller for data shared under Google's Measurement Controller-Controller Data Protection Terms (data sharing is enabled in the GA4 property). International transfers are covered by the UK Extension to the EU-US Data Privacy Framework (UK-US Data Bridge) as the primary mechanism, with Standard Contractual Clauses (SCCs) as a fallback. For more information, see Google's Privacy Policy.

We do not sell or trade your personal data. The only third-party transfers are to Supabase and Google LLC, as described above.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us: