<?php
// Enhanced security headers
header('Strict-Transport-Security: max-age=31536000; includeSubDomains');

$page_title = "Privacy Policy | UK Data Services - GDPR Compliant";
$page_description = "Our comprehensive privacy policy explaining how UK Data Services protects your personal data in compliance with GDPR and UK data protection laws.";
$canonical_url = "https://ukdataservices.co.uk/privacy-policy";
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title><?php echo htmlspecialchars($page_title); ?></title>
    <meta name="description" content="<?php echo htmlspecialchars($page_description); ?>">
    <meta name="keywords" content="privacy policy, GDPR compliance, data protection, UK Data Services, personal data">
    <meta name="author" content="UK Data Services">
    <meta name="robots" content="index, follow">
    <link rel="canonical" href="<?php echo htmlspecialchars($canonical_url); ?>">

    <!-- Open Graph / Social Media -->
    <meta property="og:type" content="website">
    <meta property="og:url" content="<?php echo htmlspecialchars($canonical_url); ?>">
    <meta property="og:title" content="<?php echo htmlspecialchars($page_title); ?>">
    <meta property="og:description" content="<?php echo htmlspecialchars($page_description); ?>">
    <meta property="og:image" content="https://ukdataservices.co.uk/assets/images/ukds-main-logo.png">
    <meta property="og:locale" content="en_GB">

    <!-- Twitter Card -->
    <meta name="twitter:card" content="summary_large_image">
    <meta name="twitter:url" content="<?php echo htmlspecialchars($canonical_url); ?>">
    <meta name="twitter:title" content="<?php echo htmlspecialchars($page_title); ?>">
    <meta name="twitter:description" content="<?php echo htmlspecialchars($page_description); ?>">
    <meta name="twitter:image" content="https://ukdataservices.co.uk/assets/images/ukds-main-logo.png">

    <!-- Favicon -->
    <link rel="icon" type="image/svg+xml" href="assets/images/favicon.svg">
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Roboto+Slab:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Lato:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap" rel="stylesheet">
    <link rel="stylesheet" href="assets/css/main.css?v=20260222">
    
    <style>
        .legal-content {
            max-width: 800px;
            margin: 0 auto;
            padding: 40px 20px;
            line-height: 1.6;
        }
        
        .legal-content h1 {
            color: #144784;
            margin-bottom: 20px;
            text-align: center;
        }
        
        .legal-content h2 {
            color: #179e83;
            margin-top: 40px;
            margin-bottom: 20px;
            border-bottom: 2px solid #179e83;
            padding-bottom: 10px;
        }
        
        .legal-content h3 {
            color: #144784;
            margin-top: 30px;
            margin-bottom: 15px;
        }
        
        .legal-content p, .legal-content li {
            margin-bottom: 15px;
            color: #444;
        }
        
        .legal-content ul {
            margin-left: 20px;
        }
        
        .contact-info {
            background: #f8f9fa;
            padding: 20px;
            border-radius: 8px;
            margin: 30px 0;
        }
        
        .last-updated {
            text-align: center;
            font-style: italic;
            color: #666;
            margin-bottom: 30px;
        }
    </style>
</head>
<body>
    <!-- Navigation -->
    <?php include($_SERVER["DOCUMENT_ROOT"] . "/includes/nav.php"); ?>

    <main class="legal-content">
        <h1>Privacy Policy</h1>
        <p class="last-updated">Last Updated: <?php echo date('jS F Y'); ?></p>

        <p>UK Data Services ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and protect your data in compliance with the General Data Protection Regulation (GDPR) and UK data protection laws.</p>

        <h2>1. Information We Collect</h2>
        <h3>Personal Information</h3>
        <p>We may collect the following personal information when you use our services:</p>
        <ul>
            <li><strong>Contact Information:</strong> Name, email address, phone number, company name</li>
            <li><strong>Business Information:</strong> Job title, industry, project requirements</li>
            <li><strong>Communication Data:</strong> Messages, enquiries, and correspondence</li>
            <li><strong>Technical Data:</strong> IP address, browser type, device information</li>
        </ul>

        <h3>How We Collect Information</h3>
        <p>We collect information through:</p>
        <ul>
            <li>Contact forms and quote requests</li>
            <li>Email communications</li>
            <li>Phone consultations</li>
            <li>Website analytics (anonymised)</li>
        </ul>

        <h2>2. How We Use Your Information</h2>
        <p>We use your personal information for the following purposes:</p>
        <ul>
            <li><strong>Service Provision:</strong> To provide web scraping and data analytics services</li>
            <li><strong>Communication:</strong> To respond to enquiries and provide customer support</li>
            <li><strong>Project Management:</strong> To deliver and manage your data projects</li>
            <li><strong>Legal Compliance:</strong> To meet regulatory and legal requirements</li>
            <li><strong>Business Improvement:</strong> To improve our services (with anonymised data)</li>
        </ul>

        <h2>3. Legal Basis for Processing</h2>
        <p>We process your personal data based on:</p>
        <ul>
            <li><strong>Contractual Necessity:</strong> To perform services you've requested</li>
            <li><strong>Legitimate Interest:</strong> For business operations and service improvement</li>
            <li><strong>Consent:</strong> Where you've explicitly agreed to data processing</li>
            <li><strong>Legal Obligation:</strong> To comply with applicable laws</li>
        </ul>

        <h2>4. Data Sharing and Disclosure</h2>
        <p>We do not sell, rent, or trade your personal information. We may share data only in these circumstances:</p>
        <ul>
            <li><strong>Service Providers:</strong> Trusted third parties who assist in service delivery</li>
            <li><strong>Legal Requirements:</strong> When required by law or legal proceedings</li>
            <li><strong>Business Protection:</strong> To protect our rights and prevent fraud</li>
            <li><strong>Consent:</strong> When you've explicitly authorised sharing</li>
        </ul>

        <h2>5. Data Security</h2>
        <p>We implement robust security measures to protect your personal information:</p>
        <ul>
            <li>SSL encryption for data transmission</li>
            <li>Secure servers with access controls</li>
            <li>Regular security audits and updates</li>
            <li>Staff training on data protection</li>
            <li>Incident response procedures</li>
        </ul>

        <h2>6. Data Retention</h2>
        <p>We retain personal data only for as long as necessary:</p>
        <ul>
            <li><strong>Active Clients:</strong> Duration of business relationship plus 7 years</li>
            <li><strong>Enquiries:</strong> 2 years from last contact</li>
            <li><strong>Financial Records:</strong> 7 years as required by law</li>
            <li><strong>Marketing Data:</strong> Until consent is withdrawn</li>
        </ul>

        <h2>7. Your Rights Under GDPR</h2>
        <p>As a data subject, you have the following rights:</p>
        <ul>
            <li><strong>Access:</strong> Request copies of your personal data</li>
            <li><strong>Rectification:</strong> Correct inaccurate or incomplete data</li>
            <li><strong>Erasure:</strong> Request deletion of your personal data</li>
            <li><strong>Restriction:</strong> Limit how we process your data</li>
            <li><strong>Portability:</strong> Receive your data in a portable format</li>
            <li><strong>Objection:</strong> Object to processing based on legitimate interests</li>
            <li><strong>Withdraw Consent:</strong> Withdraw consent at any time</li>
        </ul>

        <h2>8. International Data Transfers</h2>
        <p>Your data is processed within the UK. If we transfer data internationally, we ensure:</p>
        <ul>
            <li>Adequate data protection standards</li>
            <li>Appropriate safeguards are in place</li>
            <li>Compliance with UK and EU regulations</li>
        </ul>

        <h2>9. Cookies and Tracking</h2>
        <p>Our website uses cookies to improve user experience. For detailed information about our cookie usage, please see our <a href="cookie-policy">Cookie Policy</a>.</p>

        <h2>10. Updates to This Policy</h2>
        <p>We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or through our website.</p>

        <h2>11. Contact Us</h2>
        <div class="contact-info">
            <p>If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:</p>
            <p><strong>UK Data Services</strong><br>
            Email: <a href="mailto:privacy@ukdataservices.co.uk">privacy@ukdataservices.co.uk</a><br>
            Phone: <a href="tel:+441692689150">+44 1692 689150</a><br>
            Address: United Kingdom</p>
            
            <p><strong>Data Protection Officer:</strong> For data protection matters, contact our DPO at <a href="mailto:dpo@ukdataservices.co.uk">dpo@ukdataservices.co.uk</a></p>
        </div>

        <h2>12. Supervisory Authority</h2>
        <p>If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):</p>
        <p><strong>Information Commissioner's Office</strong><br>
        Website: <a href="https://ico.org.uk" target="_blank" rel="noopener">https://ico.org.uk</a><br>
        Phone: 0303 123 1113</p>
    </main>

    <!-- Footer -->
    <footer class="footer">
        <div class="container">
            <div class="footer-content">
                <div class="footer-section">
                    <div class="footer-logo">
                        <img src="assets/images/logo-white.svg" alt="UK Data Services">
                    </div>
                    <p>Enterprise data intelligence solutions for modern British business. Transform your operations with accurate, actionable insights and regulatory-compliant data services.</p>
                </div>
                
                <div class="footer-section">
                    <h3>Our Services</h3>
                    <ul>
                        <li><a href="/services/competitive-intelligence">Competitive Intelligence</a></li>
                        <li><a href="/services/price-monitoring">Price Monitoring</a></li>
                        <li><a href="/services/data-cleaning">Data Cleaning</a></li>
                        <li><a href="/#services">All Services</a></li>
                    </ul>
                </div>

                <div class="footer-section">
                    <h3>Locations</h3>
                    <ul>
                        <li><a href="/locations/london">London</a></li>
                        <li><a href="/locations/manchester">Manchester</a></li>
                        <li><a href="/locations/birmingham">Birmingham</a></li>
                    </ul>
                </div>

                <div class="footer-section">
                    <h3>Resources & Insights</h3>
                    <ul>
                        <li><a href="/blog/">Data Intelligence Blog</a></li>
                        <li><a href="/case-studies/">Case Studies</a></li>
                        <li><a href="/about">About UK Data Services</a></li>
                        <li><a href="/project-types">Project Types</a></li>
                        <li><a href="/faq">FAQ</a></li>
                        <li><a href="/quote">Request Consultation</a></li>
                    </ul>
                </div>

                <div class="footer-section">
                    <h3>Legal</h3>
                    <ul>
                        <li><a href="/privacy-policy">Privacy Policy</a></li>
                        <li><a href="/terms-of-service">Terms of Service</a></li>
                        <li><a href="/cookie-policy">Cookie Policy</a></li>
                        <li><a href="/gdpr-compliance">GDPR Compliance</a></li>
                    </ul>
                </div>
            </div>
            
            <div class="footer-bottom">
                <p>&copy; <?php echo date('Y'); ?> UK Data Services. All rights reserved.</p>
                <div class="social-links">
                    <a href="https://linkedin.com/company/uk-data-services" aria-label="LinkedIn" target="_blank" rel="noopener noreferrer"><img src="assets/images/icon-linkedin.svg" alt="LinkedIn"></a>
                    <a href="https://twitter.com/ukdataservices" aria-label="Twitter" target="_blank" rel="noopener noreferrer"><img src="assets/images/icon-twitter.svg" alt="Twitter"></a>
                </div>
            </div>
        </div>
    </footer>

    <!-- Scripts -->
    <script src="assets/js/main.js"></script>
</body>
</html>