GDS Analytics

Privacy notice

Last updated: 23 September 2026

This notice explains how GDS Analytics Limited collects and uses personal data through this website. It applies to people who visit the website, send us an enquiry or book a consultation through it. It does not cover the work that we carry out for our clients, which is governed by our contracts with them.

1. Who we are

GDS Analytics Limited is the controller of the personal data described in this notice.

  • Registered office: 32 Lon Gwynfryn, Swansea, SA2 0TR
  • Registered in England No. 12389759
  • VAT No. 361 2779 87
  • Information Commissioner’s Office registration: ZA667093
  • Correspondence address: PO Box 724, Swansea, SA1 9RA
  • Email: dpo@gdsanalytics.co.uk
  • Telephone: 0333 121 6772

2. What we collect and why

Enquiry forms. When you use one of the contact forms on our service pages, we collect your name, email address and the message that you send us. We use this to reply to your enquiry. Your message is emailed to us and a copy is stored in our website system.

Booking a consultation. When you book through our booking page, we collect your full name, email address, telephone number, postcode and the date and time that you choose. We use this to arrange, confirm and hold the consultation with you.

Email and telephone. If you contact us directly, we keep your contact details and the content of your message so that we can respond.

Website analytics. If you allow statistics cookies, we use Google Analytics to understand how visitors use the website, such as which pages are viewed and what type of device and browser is used. We do not use this to identify you.

Security and spam prevention. Our website security software and hosting provider record technical information such as your IP address, browser type and the pages requested, so that we can protect the website from attack. Our forms and booking page use Google reCAPTCHA, which collects information about your device and how you interact with the page, to check that a real person is submitting them.

3. Our lawful basis

We process the personal data described above under our legitimate interests (Article 6(1)(f) of the UK GDPR). Those interests are responding to people who contact us, arranging consultations, keeping the website secure and understanding how the website is used so that we can improve it. We have considered your interests and rights alongside ours, and we believe that this processing is proportionate and what you would reasonably expect.

Separately, the Privacy and Electronic Communications Regulations 2003 require us to ask for your consent before we set cookies that are not strictly necessary, such as analytics cookies. We only set those cookies if you agree to them, and you can change your choice at any time using the “Manage consent” option on the website. Our cookie policy explains this in more detail.

4. How long we keep it

We keep personal data collected through this website for 12 months and then delete it. If an enquiry leads to us working together, we keep the records that relate to that engagement for as long as our contract and our legal obligations (such as tax and accounting rules) require, and we will explain this to you at the time.

5. Who we share it with

We do not sell your personal data. We share it only with the service providers that help us to run the website and our business, under contracts that require them to protect it and use it only on our instructions. These are:

  • our website hosting, maintenance and email delivery providers;
  • Google, for Google Analytics (only if you consent) and Google reCAPTCHA;
  • Defiant Inc., which provides the Wordfence security service that protects the website.

We may also disclose personal data where the law requires us to, for example to a regulator or the police.

6. International transfers

Some of these providers, including Google and Defiant, are based in the United States or process data there. Where personal data is transferred outside the UK, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or on the International Data Transfer Agreement or Addendum issued by the Information Commissioner.

7. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data that we hold about you;
  • ask us to correct data that is inaccurate or incomplete;
  • ask us to delete your data;
  • ask us to restrict how we use your data;
  • object to processing that we carry out under our legitimate interests;
  • withdraw your consent to cookies at any time.

To exercise any of these rights, please email dpo@gdsanalytics.co.uk or write to us at the correspondence address above. There is no charge, and we will respond within one month.

8. Complaints

If you are unhappy with how we have handled your personal data, please contact us first so that we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 1113, or online at ico.org.uk/make-a-complaint.

9. Changes to this notice

We review this notice regularly and will update it when our use of personal data changes. The date at the top shows when it was last updated.

© 2026 GDS Analytics. All rights reserved.

GDS Analytics Limited. Registered in England No. 12389759. Registered office: 32 Lon Gwynfryn, Swansea, SA2 0TR. VAT No. 361 2779 87. ICO registration ZA667093.
Website by Melton Web Design Experts, SBNR