Controller and contact
Lattice Orchard AI Ltd is responsible for personal information received through business enquiries to mediacarouselmingrsh.hair. Its registered office is 18 Fenwillow Street, Ancoats, Manchester, M4 6JQ, United Kingdom. Contact [email protected] for privacy questions, requests or complaints. Please identify your request without sending unnecessary identification documents.
Information collected
Correspondence may contain your name, email address, organisation, service interests and information you choose to include about your work. The contact form prepares an email draft on your device. Its contents are not submitted to a website form server. We receive the enquiry when you send the email through your email provider.
Website delivery can generate technical records such as IP addresses, requested files, browser information, timestamps and error events in hosting systems. These records support delivery, security and troubleshooting. Do not include confidential client records, credentials or special category personal data in an initial enquiry.
Purposes and lawful bases
We use enquiry information to respond, clarify requirements and discuss possible services. Where you request steps towards a contract, processing may be necessary for those steps. Business contact handling and website security may rely on legitimate interests, subject to considering your rights and reasonable expectations. Records required by law are processed to meet legal obligations.
Consent is used where legally required, including optional device storage where an exemption does not apply. Consent can be withdrawn without affecting processing already carried out lawfully. Enquiries are not automatically added to a marketing mailing list. Website enquiry information is not used to make solely automated decisions producing legal or similarly significant effects.
Cookies and device storage
The website's navigation and email-draft functions operate without retaining form contents in browser storage. Any consent interface supplied with the website is governed by the choices it presents. Our cookie policy explains storage categories and browser controls. Technical server logs are distinct from cookies and may exist when cookies are blocked.
Processors and disclosure
Hosting, email, security and administrative service providers may process information to operate the website and handle correspondence. They receive information necessary for their role and must be subject to appropriate contractual and security arrangements where they act as processors. Information may also be disclosed to professional advisers or authorities where necessary and lawful.
We do not sell enquiry information. We do not send an enquiry to an AI model merely because it concerns AI services. Any project use of personal data requires a separately agreed purpose and appropriate handling terms. You may request information about the providers relevant to your correspondence.
International transfers and retention
Where personal information is transferred outside the UK, applicable transfer requirements must be met. Safeguards may include an adequacy arrangement or appropriate contractual measures, with additional assessment where required. Ask the privacy contact for information about safeguards relevant to your records.
Enquiries are retained while needed for the discussion and reasonable follow-up, then reviewed for deletion. Contract, accounting and dispute records may need longer retention for legal obligations or the establishment, exercise or defence of claims. Security records are retained according to their operational purpose. Backups may retain deleted material until their normal replacement cycle completes; access remains restricted.
Your rights and complaints
The UK GDPR and Data Protection Act 2018, as amended, govern relevant UK processing. Depending on the circumstances, you may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. Rights have legal conditions and exceptions. We may need proportionate information to establish identity before disclosing personal records.
Where the EU GDPR applies, its relevant protections also apply. California residents may have rights under the CCPA, as amended, where its applicability requirements are met, including access, correction and deletion and protections against unlawful discrimination for exercising rights. Applicability depends on the processing and the legal thresholds; this policy does not remove rights conferred by law.
You may complain to the Information Commissioner's Office or another competent supervisory authority. Contacting us first can help resolve a concern but is not a condition of making a regulatory complaint. Material changes to handling practices will be reflected in this policy.