Last updated: December 2024

Introduction

Reeves & Co ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage with our services.

Information We Collect

Information You Provide Directly

  • Contact Information: Name, email address, company name, phone number when you contact us
  • Project Information: Business requirements, data descriptions, project goals during consultations
  • Communication Records: Emails, meeting notes, and other correspondence

Information Collected Automatically

  • Website Analytics: IP address, browser type, pages visited, time spent on site
  • Cookies: Essential cookies for website functionality, analytics cookies (with consent)
  • Log Data: Access times, referring websites, browser information

How We Use Your Information

We use your information to:

  • Provide Services: Respond to inquiries, deliver consulting services, manage projects
  • Improve Our Website: Analyze usage patterns, optimise user experience
  • Communicate: Send project updates, relevant industry insights, service information
  • Legal Compliance: Meet regulatory requirements, protect our rights

Cookies and Tracking

Types of Cookies We Use

Managing Your Cookie Preferences

You can control cookie settings through:

  • Our cookie banner (appears on first visit)
  • Browser settings (to block/delete cookies)

Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Service Providers

  • Analytics Services: Google Analytics (anonymized data)
  • Cloud Services: AWS, Google Cloud (secure data processing)
  • Communication Tools: Email providers, video conferencing platforms

Legal Requirements

We may disclose information when required by law, court order, or to protect our legal rights.

Business Transfers

In case of merger, acquisition, or sale of assets, your information may be transferred to the new entity.

Data Security

We implement appropriate security measures:

  • Encryption: Data encrypted in transit and at rest
  • Access Controls: Limited access to authorized personnel only
  • Regular Audits: Security assessments and vulnerability testing
  • Incident Response: Procedures for data breach notification and response

Your Rights (GDPR)

If you're in the EU/UK, you have the following rights:

Right to Access

Request a copy of your personal data we hold

Right to Rectification

Correct inaccurate or incomplete personal data

Right to Erasure

Request deletion of your personal data ("right to be forgotten")

Right to Restrict Processing

Limit how we use your personal data

Right to Data Portability

Receive your data in a structured, machine-readable format

Right to Object

Object to processing for marketing or legitimate interests

Exercising Your Rights

To exercise these rights, contact us at:

We will respond within 30 days of receiving your request.

Data Retention

We retain your information for:

  • Active Projects: Duration of engagement plus 3 years for records
  • Inquiries: 2 years from last contact
  • Analytics Data: 26 months (Google Analytics default)
  • Legal Requirements: As required by applicable law

International Data Transfers

We may transfer your data outside your country of residence. We ensure adequate protection through:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • Appropriate safeguards under applicable data protection laws

Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If we discover we have collected information from a child under 16, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will:

  • Post the updated policy on this page
  • Update the "Last updated" date
  • Notify you of material changes via email (if we have your contact information)
  • Obtain fresh consent where required by law

Contact Information

For questions about this Privacy Policy or our data practices:

Reeves & Co
Data Protection Inquiries
Email:

EU Representative: If required under GDPR, we will appoint an EU representative and update this section.

Supervisory Authority

If you're unsatisfied with our response to your privacy concerns, you may lodge a complaint with your local data protection authority:

  • France: Commission Nationale de l'Informatique et des Libertés (CNIL)
  • Germany: Your state's data protection authority (Landesdatenschutzbehörde)
  • Canada: Office of the Privacy Commissioner of Canada