Introduction

At Modal®, we take the protection of your personal data seriously. This General Data Protection Regulation (GDPR) Policy explains how we collect, use, store, and protect your personal information in accordance with the UK GDPR and Data Protection Act 2018.

We are committed to transparency in our data handling practices and to empowering you with control over your personal information. This policy aims to clearly outline our approach to data protection and your rights regarding your personal data.

Who We Are

Data Controller: Modal®
Address: 4 Naval St, Ancoats, Manchester, M4 6EW
Email: hello@modal.digital
Phone: 0161 399 3065

The Personal Data We Collect

We may collect, use, and store the following categories of personal data:

Clients and Prospective Clients

• Contact information (name, email address, phone number, postal address)
• Business details (company name, job title, industry)
• Communications preferences
• Project requirements and specifications
• Payment and billing information
• Website usage data and analytics

Website Visitors

• IP address
• Browser type and version
• Operating system
• Referral source
• Length of visit, page views, and website navigation
• Information collected through cookies and similar technologies

Job Applicants

• Contact information
• Employment history
• Educational background
• Skills and qualifications
• Right to work documentation
• References

How We Collect Your Personal Data

We collect personal data through various channels, including:

• Direct interactions (when you contact us, submit forms, or create an account)
• Automated technologies (cookies, server logs, analytics tools)
• Third-parties (business partners, sub-contractors, payment processors)
• Publicly available sources

How We Use Your Personal Data

We only process your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To perform a contract with you
• To comply with a legal obligation
• For our legitimate interests (running our business, providing services, ensuring security)
• And always with your consent

Specific Uses Include:

• Delivering our web design and digital services
• Managing our relationship with you
• Administering and protecting our business
• Providing information about our services
• Processing payments
• Improving our website and services
• Recruitment and hiring

Legal Basis for Processing

We rely on the following lawful bases for processing your personal data:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you
• Legal obligation: Where processing is necessary for compliance with legal obligations
• Legitimate interests: Where processing is necessary for our legitimate interests or those of a third-party

Data Sharing and Transfers

We may share your personal data with:

• Service providers acting as processors
• Professional advisers (lawyers, bankers, auditors, insurers)
• HM Revenue & Customs, regulators, and other authorities
• Third-parties to whom we may sell, transfer, or merge parts of our business

We ensure that any third-parties who process your data on our behalf provide adequate safeguards for your personal data. We generally process data within the UK and European Economic Area (EEA). If we transfer data outside the UK or EEA, we implement appropriate safeguards to ensure your data remains protected.

Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. These include:

• Encryption of sensitive data
• Secure storage systems
• Access controls and authentication procedures
• Regular security assessments
• Staff training on data protection
• Regular backup procedures

We limit access to your personal data to those employees, agents, contractors, and other third-parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider:

• The amount, nature, and sensitivity of the personal data
• The potential risk of harm from unauthorised use or disclosure
• The purposes for which we process your personal data
• Whether we can achieve those purposes through other means
• The applicable legal requirements

In some circumstances, we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

Your Rights

Under the GDPR, you have the right to:

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate personal data
• Erasure: Request erasure of your personal data in certain circumstances
• Restriction: Request restriction of processing of your personal data
• Portability: Request the transfer of your personal data to you or a third party
• Objection: Object to processing of your personal data
• Withdrawal of consent: Withdraw consent at any time where we rely on consent to process your personal data

These rights are subject to certain exceptions and limitations. To exercise any of these rights, please contact us using the details provided in this policy.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to distinguish you from other users of our website. This helps us to provide you with a good user experience when you browse our website and allows us to improve our website too.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

Changes to This Policy

We may update this policy from time to time in response to changing legal, technical, or business developments. When we update our policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

How to Contact Us or Make a Complaint

If you have any questions about this policy or our data processing practices, or if you wish to exercise any of your rights, please contact us at:

Modal®
4 Naval St, Ancoats
Manchester, M4 6EW
‍
Email: hello@modal.digital
Phone: 0161 399 3065

If you have a concern about our data processing practices, we hope that you will contact us first so that we can address your concerns. However, you also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

Last Updated

This policy was last updated on 25th March 2025.

Modal® is committed to respecting your privacy and protecting your personal data. This policy aims to give you information on how we collect and process your personal data through your use of our website and services, including any data you may provide when you sign up to our newsletter, purchase a service, or contact us.