Who is responsible for your information
Source & Acre is the trading name of Amrit H Singh Swaley, a UK sole trader. Amrit H Singh Swaley is the controller responsible for the personal information covered by this notice.
For privacy questions or requests, email amrit@sourceandacre.com, or write to Source & Acre, Office 10648, 321–323 High Road, Chadwell Heath, Essex RM6 6AX, United Kingdom.
Information we receive
If you email us, we receive your email address, name where provided, message and any information you choose to include. We use this information to respond, assess your proposed brief and manage the business relationship.
This website is hosted using Cloudflare Pages. Hosting and security services process technical request information, which may include your IP address, browser details and request time. Email is handled through Microsoft 365. These providers process information as part of operating their services.
Cookies and analytics
We have not added advertising trackers, audience analytics or optional website cookies. The website does not contain an enquiry form. Email links open your own email service, which has its own privacy settings. Hosting security features may operate as necessary to deliver and protect the site.
Why we use information
We rely on legitimate interests to respond to business enquiries, manage prospective client relationships and operate a secure website. If you ask us to take necessary steps towards a contract with you personally, we may process information on that contractual basis. Legal obligations may require us to retain certain business records. We do not sell enquiry information.
Service providers and international processing
Cloudflare and Microsoft process information to host and protect the website and deliver email. Their systems may process information outside the UK, including in the United States. Their published data-processing terms describe contractual safeguards for international transfers, including standard contractual clauses and provisions for UK transfers.
Details are available in Cloudflare’s data processing addendum and Microsoft’s data protection addendum. You can contact us for information about the safeguards relevant to your enquiry. Their wider privacy information is available in Cloudflare’s privacy policy and Microsoft’s privacy statement.
How long we keep information
For enquiries that do not become client work, we review the correspondence 12 months after the last substantive exchange. We delete it unless it is still needed for an active discussion or a legal obligation. Correspondence that becomes part of a client engagement is retained according to the engagement and applicable recordkeeping requirements. You can contact us about the retention of your information or request deletion.
Your rights
Depending on the circumstances, UK data protection law gives you rights to access, correct or erase personal information, restrict its use and obtain certain information in a portable format. Contact us using the details above to make a request.
Your right to object
You can object to our use of your personal information where we rely on legitimate interests. Contact us using the details above.
You can also raise a concern with the UK Information Commissioner’s Office.
Commissioned research
This notice covers website visitors and initial enquiries. Information handling for commissioned research is considered separately for each engagement. Where research involves personal information obtained from public sources, public availability does not remove data protection responsibilities.