Privacy Policy & Data Handling

1. Introduction and Scope

Welcome to Showharbortrx (accessible via Showharbortrx.com). We are committed to protecting the privacy, integrity, and safety of personal data relating to our website visitors, clients, and prospective business partners throughout the United Kingdom. This comprehensive Privacy Policy outlines how we collect, process, secure, and retain your personal data in accordance with our legal obligations.

2. Regulatory Compliance & Data Controller

Showharbortrx processes personal data strictly under the regulatory guidelines of the United Kingdom, specifically the Data Protection Act 2018 (DPA 2018) and the UK General Data Protection Regulation (UK GDPR). For the purposes of these regulations, Showharbortrx acts as the "Data Controller" for all personal data submitted directly through our virtual consultation requests, interactive tools, and web resources.

3. Legal Bases for Data Processing

To comply with UK GDPR principles, we only process your personal information when we have a verified legal basis. Specifically, we rely on the following processing foundations:

• Consent: When you voluntarily submit your details through our consultation form or opt into functional cookies.
• Contractual Necessity: When processing is required to assess your technical specifications or draft pre-contractual advisory terms.
• Legitimate Interests: To optimize website performance, defend against malicious cyber threats, and refine our educational resource structures.
• Legal Obligation: To satisfy any relevant UK regulatory audits, financial reporting, or statutory request requirements.

4. Information We Collect

Depending on how you interact with Showharbortrx.com, we may gather and maintain the following categories of data:

• Identity & Professional Profile Data: Full name, job title, and the name of your organization.
• Contact Details: Corporate email address and associated business details provided during initial validation.
• Technical Information: Internet Protocol (IP) address, browser software profile, timezone offsets, operating system configurations, and generalized geographic location data collected via operational system logs.
• Contextual Inquiry Data: Free-text technical details regarding your current relational databases, manual file interdependencies, and operational systems shared in the consultation message box.

5. How We Use Your Information

We utilize gathered data strictly to fulfill your direct requests and maintain operational safety. Common uses include:

• Evaluating your organizational suitability and verifying active UK corporate registrations prior to scheduling any virtual workshops.
• Formulating accurate, context-specific strategy outlines tailored to your documented spreadsheets, relational databases, or AI concerns.
• Analyzing aggregate web traffic to identify page layout bottlenecks, refine visual accessibility, and improve overall content quality.
• Preventing spam submissions, protecting our technical architecture from brute-force attacks, and securing our contact forms.

6. Data Sharing & Third-Party Disclosures

Showharbortrx holds a strict policy regarding your corporate data. We do not sell, lease, trade, or distribute your personal details to third-party marketing brokers or advertising companies. We only share information with trusted third parties under these specific conditions:

• Authorized Service Providers: Secure hosting environments, standard communication platforms, and system administration services that operate under strict non-disclosure terms and processing directives.
• Legal & Regulatory Mandates: Where we are strictly required by UK courts, law enforcement, or supervisory bodies (such as the Information Commissioner's Office) to disclose information to comply with a statutory legal obligation.

7. International Data Transfers

Our physical and cloud infrastructure is primarily maintained within the United Kingdom or the European Economic Area (EEA). If technical operations occasionally require data processing outside the UK/EEA (for example, via international servers), we ensure equivalent protections are active. This includes implementing standard contractual clauses (SCCs) or utilizing entities with valid adequacy decisions recognized under UK data protection guidelines.

8. Comprehensive Data Security Measures

To prevent accidental loss, unauthorized access, or unauthorized alteration of your personal data, we utilize robust administrative and technical protections. All incoming form data is encrypted in transit using Transport Layer Security (TLS/HTTPS). Access to verified corporate inquiries is restricted strictly to advisory personnel who have undergone operational training and are bound by strict professional confidentiality standards.

9. Data Retention and Deletion Schedules

We do not store your personal information indefinitely. If a submitted consultation request does not proceed to a formal advisory contract, all associated contact names, email addresses, and contextual messages are permanently deleted from our primary business systems within 120 days. Standard system logs are systematically overwritten every 30 days, unless a security anomaly requires extended monitoring or auditing.

10. Your UK GDPR Statutory Rights

As a UK citizen or representative of a UK business entity, you hold extensive legal rights over your personal data under the DPA 2018 and UK GDPR:

• Right of Access (Subject Access Request): You have the legal right to request complete copies of all personal details we maintain regarding your account or corporate inquiries.
• Right to Rectification: You may request immediate correction of any outdated, incomplete, or inaccurate personal records.
• Right to Erasure ("Right to be Forgotten"): You may request that we permanently delete your contact details and message histories from all operational servers.
• Right to Restrict Processing: You have the right to request that we pause or limit the processing of your personal information while you dispute its accuracy.
• Right to Object: You have the right to object to any data processing performed under our legitimate interest arguments.
• Right to Withdraw Consent: Where our processing relies directly on your voluntary consent, you may withdraw this approval at any time.

To exercise any of these statutory rights, please contact our technical desk via the secure contact channel. We aim to respond to all valid, verified requests within 30 calendar days at no charge.

11. Lodging a Complaint

If you believe Showharbortrx has not processed your personal data in accordance with UK statutory expectations, you have the right to lodge a formal complaint with the supervisory body in the United Kingdom:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline Number: 0303 123 1113 | Website: https://ico.org.uk