Who controls your data?
Vistory Group Ltd is the data controller for personal data handled through this website and direct enquiries.
- Registered office and privacy contact
- Vistory Group Ltd, Brenchley House, Brenchley Mews, Charing, Kent, United Kingdom, TN27 0JW
Data we may collect
When you contact us, we receive the information you choose to provide, such as your name, business contact details, organisation, role and enquiry. When you visit the site, essential technical records may include your IP address, browser, device, requested page, timestamp and security events.
Why we use it
- To respond to enquiries and take steps requested before a potential contract.
- To manage business relationships and relevant follow up based on our legitimate interests.
- To secure, operate and diagnose the website based on our legitimate interests.
- To meet legal, regulatory and record keeping obligations.
Where we rely on legitimate interests, we consider the necessity of the processing and balance it against your rights.
Cookies and measurement
Vistory uses Google Tag Manager to support aggregated audience measurement. Google consent signals are set to denied by default for analytics, advertising, personalization and user data. The website does not grant those permissions or intentionally place optional analytics or advertising cookies. Limited cookieless technical signals may be sent to Google, including the page viewed, device and browser information, timestamp and truncated or technical network information. Tags added through the container must respect these default consent settings.
Who receives data?
Access is limited to authorised Vistory personnel and service providers supporting hosting, security, communications and professional advice. Data may also be disclosed where required by law or to protect legal rights. We do not sell personal data.
International processing
Some technical providers may process data outside the United Kingdom or European Economic Area. Where data protection law requires it, Vistory uses an approved transfer mechanism and appropriate safeguards.
How long do we keep it?
We keep enquiry and relationship records only for as long as needed to respond, manage the relationship and meet legal obligations. Technical and security records are retained according to operational need and provider retention settings, then deleted or anonymised. A longer period may apply where needed for a legal claim or statutory duty.
Your rights
Depending on where you are and the circumstances, you may have rights to access, correct, erase, restrict or object to processing, and to receive portable data. Where processing is based on consent, you may withdraw it at any time. You may contact us to exercise a right.
You may also complain to the UK Information Commissioner's Office at ico.org.uk, or to the competent data protection authority in your country if EU GDPR applies.
Updates to this notice
We review this notice as the website and our processing evolve. Material changes will be reflected on this page with a new update date.