How we handle your data.

1. Data controller

Actualised Living Ltd is the data controller for personal data processed through this website and the Section Link platform. Actualised Living Ltd is registered with the Information Commissioner's Office (ICO). Our registered address is available on request by contacting hello@sectionlink.com.

2. What data we collect

We may collect and process:

• Contact information: name, email address, phone number and organisation, when you submit a form or contact us.
• Usage data: pages visited, time on site, referral source and similar analytics data collected via cookies.
• Technical data: IP address, browser type, device type, operating system.
• Platform data: if you use Section Link as a registered user, we process data in accordance with the applicable data processing agreement with your organisation.

3. How we use your data

• To respond to enquiries and provide information you request.
• To improve our website and services.
• To send relevant communications where you have opted in.
• To comply with legal and regulatory obligations.
• To perform contracts with partner organisations.

4. Lawful basis for processing

We rely on the following lawful bases under UK GDPR:

• Consent: where you have given clear consent for us to process your personal data for a specific purpose.
• Legitimate interests: where processing is necessary for our legitimate business interests, such as improving our services, provided these are not overridden by your rights.
• Contract: where processing is necessary to perform a contract with you or your organisation.
• Legal obligation: where processing is necessary to comply with a legal or regulatory requirement.

5. Data sharing

We do not sell your personal data. We may share data with trusted third parties who assist us in operating our website and services, subject to appropriate data processing agreements. These may include hosting providers, analytics services and email platforms. All data is hosted within the United Kingdom and European Economic Area on Microsoft Azure infrastructure.

6. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form submissions are retained for up to 24 months unless you request earlier deletion.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing.
• Data portability.
• Withdraw consent at any time.

To exercise any of these rights, contact us at hello@sectionlink.com.

8. Data security

We implement appropriate technical and organisational measures to protect your personal data. We hold ISO 27001 certification, are Cyber Essentials Plus certified and meet NHS Data Security and Protection Toolkit (DSPT) standards. All data is encrypted at rest and in transit.

9. International transfers

We do not transfer personal data outside the United Kingdom and European Economic Area. All data is stored and processed within UK and EEA Microsoft Azure regions.

10. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

11. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

12. Contact us

For any questions about this privacy policy or our data practices, please contact us at hello@sectionlink.com.