Privacy Policy

Last updated: June 2026

1. Who we are

Cornet Joyce is an independent business-to-business commercial consultancy. Our website is www.cornetjoyce.com. For data protection queries, contact us at info@cornetjoyce.com.

2. What data we collect

We collect personal data in the following situations:

• Contact form — your name, email address, and message when you submit an enquiry via the Get in Touch form.
• Cookies & analytics — see Section 4 below.

We do not collect sensitive personal data, payment information, or data from minors.

3. How we use your data

• To respond to your enquiry and discuss your commercial objectives.
• To improve our website and understand how visitors interact with it (analytics, only on consent).
• We do not use your data for automated decision-making, profiling, or direct marketing without your explicit consent.

4. Cookies and analytics

We use a cookie consent banner on our website. No tracking cookies are set until you click Accept.

• If you Accept — we load Google Analytics 4 (GA4), which uses cookies to collect anonymised information about how you use our site (pages visited, time spent, approximate location). Google may process this data in the United States under Standard Contractual Clauses. See Google's Privacy Policy.
• If you Decline — no tracking cookies are set and GA4 is not loaded.
• Consent preference — your choice is saved to your browser's localStorage so we do not ask again on repeat visits. This is not a cookie and does not track you.

To withdraw consent, clear your browser's site data for this domain and reload the page. The banner will reappear.

5. Third-party processors

• Netlify — our website is hosted on Netlify, which receives and stores contact form submissions on our behalf. Netlify is GDPR-compliant. See Netlify's Privacy Policy.
• Google Analytics 4 — only loaded on consent (see Section 4). See Google's Privacy Policy.

We do not share your personal data with any other third parties without your explicit consent, except where required by law.

6. Legal basis for processing

• Contract / pre-contractual steps — processing your enquiry and preparing for a consultation (Article 6(1)(b) UK GDPR).
• Consent — analytics cookies (Article 6(1)(a) UK GDPR). You may withdraw consent at any time.
• Legitimate interests — improving our website and services (Article 6(1)(f) UK GDPR), balanced against your privacy rights.

7. Data retention

Enquiry data submitted via the contact form is retained for up to 3 years from the date of last contact, or until you request deletion. Analytics data follows Google's standard 14-month retention period.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure ("right to be forgotten").
• Restrict or object to processing.
• Data portability (receive your data in a machine-readable format).
• Withdraw consent at any time without affecting the lawfulness of prior processing.
• Lodge a complaint with the ICO (UK): ico.org.uk.

To exercise any right, email info@cornetjoyce.com. We will respond within 30 days.

9. Data security

Our website is served exclusively over HTTPS. Form submissions are processed by Netlify's secure infrastructure. We do not store payment or card details of any kind.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of our site after an update constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions or to exercise your rights, contact us at info@cornetjoyce.com.