Privacy Policy

About this policy

GRAFTON UK INVESTMENT COMPANY LIMITED is a private company limited by shares in England and Wales. This website presents informational digital materials for adults and includes a request form through which users may ask about access, content scope, or product details. This policy is intended to explain, in realistic and readable terms, how information may be handled in that context.

Data we may collect

When a visitor uses the request form or contacts the company directly, the company may receive information such as a name provided voluntarily, a phone number, the chosen PDF resource, message notes, and ordinary correspondence details. The company may also hold records of the date and nature of communications that take place in relation to an enquiry.

We do not seek unnecessary or unrelated personal data. The website is structured around educational PDF materials and a straightforward business communication process. Visitors should avoid submitting sensitive medical or diagnostic information through the website.

How data may be used

Data may be used to review and respond to requests, explain the nature of a publication, discuss digital access, maintain internal records of enquiries, and handle reasonable administrative matters connected to communications with the visitor.

Data may also be used where needed to protect the company’s legitimate business interests, maintain accurate records, respond to follow-up questions, or address disputes, misuse, or compliance-related issues where appropriate.

Retention

Enquiry records are not kept forever by default. Information may be retained for a reasonable period while communications remain active, where follow-up questions are possible, or where records are needed for legitimate administrative, accounting, or compliance purposes. Records that are no longer reasonably required may be deleted in the ordinary course of business.

User rights

Subject to applicable law, individuals may have rights relating to access, rectification, erasure, restriction, objection, and data handling transparency. Requests should be made using the contact details on this page. The company may need to verify identity or ask for clarification before taking action on a request.

Detailed privacy information

When a visitor contacts a small company through a website such as this one, the purpose is usually straightforward. The person wants to ask about a specific digital publication, clarify the access process, or understand the format before proceeding. For that reason, our privacy approach is based on proportionality. We do not aim to gather broad categories of unnecessary information. Instead, we limit collection to what is reasonably relevant to handling an enquiry, maintaining ordinary business communication, and preserving records that help us respond accurately and consistently.

Information submitted through the request form may include a name if the visitor chooses to provide one, a phone number, a selected PDF resource, and any notes entered into the message field. This information is used to review the request, identify which material is being discussed, and provide a response. If a visitor contacts the company directly by email or telephone, similar information may be generated through the communication itself.

Personal data is processed in a measured business context. We may use the data to confirm an enquiry, provide general explanations of a product, discuss practical access questions, or keep internal records of previous communications so that repeat correspondence can be handled in an orderly way. We do not frame the website as a medical service and do not ask visitors to disclose medical diagnoses, treatment history, or highly sensitive personal data for the purpose of accessing informational materials.

Retention periods depend on the nature of the communication. General enquiries may be retained for a reasonable period so that the company can answer follow-up questions, address record-keeping needs, and maintain continuity in communications. Where no ongoing relationship develops and no legal or administrative reason exists to retain a record, information may be deleted in the ordinary course of business. Where records are needed for compliance, accounting, dispute handling, or legitimate administrative needs, they may be kept for longer where reasonable and lawful.

Visitors in the United Kingdom may have rights under applicable data protection law, including the right to request access to personal data, request correction of inaccurate information, request erasure in appropriate circumstances, object to certain forms of processing, and raise concerns with a supervisory authority where applicable. These rights are not absolute in every situation, but enquiries are taken seriously and considered in a practical and lawful way.

We seek to keep data handling aligned with the nature of the website. This is an informational digital publishing website aimed at adults who want to understand the available materials before moving forward. It is not built to create an intrusive profile of the visitor. It is built to allow a legitimate business to answer questions, explain access, and keep communication manageable.

Reasonable organisational steps may be taken to limit unnecessary access to enquiry records and to keep correspondence in a business environment that is appropriate for a small company. No internet-based system is entirely without risk, but the goal is to keep data handling proportionate to the scale and purpose of the site.

If privacy-related questions arise, visitors can contact the company using the business contact details listed on this page. Requests should be clear enough to allow the company to understand the subject of the enquiry and respond appropriately. Additional information may be required where identity verification is reasonably necessary before disclosing or changing personal data.

When a visitor contacts a small company through a website such as this one, the purpose is usually straightforward. The person wants to ask about a specific digital publication, clarify the access process, or understand the format before proceeding. For that reason, our privacy approach is based on proportionality. We do not aim to gather broad categories of unnecessary information. Instead, we limit collection to what is reasonably relevant to handling an enquiry, maintaining ordinary business communication, and preserving records that help us respond accurately and consistently.

Information submitted through the request form may include a name if the visitor chooses to provide one, a phone number, a selected PDF resource, and any notes entered into the message field. This information is used to review the request, identify which material is being discussed, and provide a response. If a visitor contacts the company directly by email or telephone, similar information may be generated through the communication itself.

Personal data is processed in a measured business context. We may use the data to confirm an enquiry, provide general explanations of a product, discuss practical access questions, or keep internal records of previous communications so that repeat correspondence can be handled in an orderly way. We do not frame the website as a medical service and do not ask visitors to disclose medical diagnoses, treatment history, or highly sensitive personal data for the purpose of accessing informational materials.

Retention periods depend on the nature of the communication. General enquiries may be retained for a reasonable period so that the company can answer follow-up questions, address record-keeping needs, and maintain continuity in communications. Where no ongoing relationship develops and no legal or administrative reason exists to retain a record, information may be deleted in the ordinary course of business. Where records are needed for compliance, accounting, dispute handling, or legitimate administrative needs, they may be kept for longer where reasonable and lawful.

Visitors in the United Kingdom may have rights under applicable data protection law, including the right to request access to personal data, request correction of inaccurate information, request erasure in appropriate circumstances, object to certain forms of processing, and raise concerns with a supervisory authority where applicable. These rights are not absolute in every situation, but enquiries are taken seriously and considered in a practical and lawful way.

We seek to keep data handling aligned with the nature of the website. This is an informational digital publishing website aimed at adults who want to understand the available materials before moving forward. It is not built to create an intrusive profile of the visitor. It is built to allow a legitimate business to answer questions, explain access, and keep communication manageable.

Reasonable organisational steps may be taken to limit unnecessary access to enquiry records and to keep correspondence in a business environment that is appropriate for a small company. No internet-based system is entirely without risk, but the goal is to keep data handling proportionate to the scale and purpose of the site.

If privacy-related questions arise, visitors can contact the company using the business contact details listed on this page. Requests should be clear enough to allow the company to understand the subject of the enquiry and respond appropriately. Additional information may be required where identity verification is reasonably necessary before disclosing or changing personal data.

When a visitor contacts a small company through a website such as this one, the purpose is usually straightforward. The person wants to ask about a specific digital publication, clarify the access process, or understand the format before proceeding. For that reason, our privacy approach is based on proportionality. We do not aim to gather broad categories of unnecessary information. Instead, we limit collection to what is reasonably relevant to handling an enquiry, maintaining ordinary business communication, and preserving records that help us respond accurately and consistently.

Information submitted through the request form may include a name if the visitor chooses to provide one, a phone number, a selected PDF resource, and any notes entered into the message field. This information is used to review the request, identify which material is being discussed, and provide a response. If a visitor contacts the company directly by email or telephone, similar information may be generated through the communication itself.

Personal data is processed in a measured business context. We may use the data to confirm an enquiry, provide general explanations of a product, discuss practical access questions, or keep internal records of previous communications so that repeat correspondence can be handled in an orderly way. We do not frame the website as a medical service and do not ask visitors to disclose medical diagnoses, treatment history, or highly sensitive personal data for the purpose of accessing informational materials.

Retention periods depend on the nature of the communication. General enquiries may be retained for a reasonable period so that the company can answer follow-up questions, address record-keeping needs, and maintain continuity in communications. Where no ongoing relationship develops and no legal or administrative reason exists to retain a record, information may be deleted in the ordinary course of business. Where records are needed for compliance, accounting, dispute handling, or legitimate administrative needs, they may be kept for longer where reasonable and lawful.

Visitors in the United Kingdom may have rights under applicable data protection law, including the right to request access to personal data, request correction of inaccurate information, request erasure in appropriate circumstances, object to certain forms of processing, and raise concerns with a supervisory authority where applicable. These rights are not absolute in every situation, but enquiries are taken seriously and considered in a practical and lawful way.

We seek to keep data handling aligned with the nature of the website. This is an informational digital publishing website aimed at adults who want to understand the available materials before moving forward. It is not built to create an intrusive profile of the visitor. It is built to allow a legitimate business to answer questions, explain access, and keep communication manageable.

Reasonable organisational steps may be taken to limit unnecessary access to enquiry records and to keep correspondence in a business environment that is appropriate for a small company. No internet-based system is entirely without risk, but the goal is to keep data handling proportionate to the scale and purpose of the site.

If privacy-related questions arise, visitors can contact the company using the business contact details listed on this page. Requests should be clear enough to allow the company to understand the subject of the enquiry and respond appropriately. Additional information may be required where identity verification is reasonably necessary before disclosing or changing personal data.

Contact information

Return to main page