Privacy Policy

Last updated: [September 2024]

At Pania (the "Company"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website ("Site"), subscribe to our email mailing lists, and use our services. We comply with the General Data Protection Regulation (GDPR) and other relevant privacy laws applicable in the United Kingdom.

1. Who We Are

Pania (referred to as "we," "our," or "us") is a company registered in the United Kingdom. This Privacy Policy applies to our website at [www.pania.com] (the "Site") and related services provided by us.

For the purpose of data protection laws, we are the "data controller" of the personal information collected via our website, meaning we are responsible for deciding how we use your personal data.

2. What Information We Collect

We collect personal information that you provide directly to us as well as data automatically collected through our use of third-party analytics services. This information includes:

(a) Information You Provide Directly:

- Name

- Email address

- Contact details

- Any other personal information you provide via forms on our website (e.g., newsletter sign-up or contact forms)

(b) Information We Automatically Collect:

- Analytics data: We use Google Analytics and Squarespace Analytics to monitor traffic and site activity. This may include your IP address, browser type, device information, pages visited, and time spent on the site. All data collected through these tools is anonymised to ensure your privacy.

- Cookies and Tracking Technologies: Our site uses cookies and other tracking technologies to enhance user experience and gather usage data. Please refer to our [Cookie Policy] for more details.

3. How We Use Your Information

We may use the personal data we collect for the following purposes:

- To provide and improve our services: We use data to maintain, optimise, and improve the functionality of our Site.

- Email communications: If you subscribe to our mailing list, we use your email to send newsletters, promotions, or updates, and you can unsubscribe at any time.

- Analytics and user behavior: We use data from Google Analytics and Squarespace Analytics to understand how users interact with our Site and improve your overall experience.

4. Legal Basis for Processing Your Data

We process your personal data in accordance with UK data protection laws, based on the following legal grounds:

- Consent: When you sign up for our email newsletter or agree to our cookie policy.

- Legitimate Interests: For improving our services and the user experience on our website.

- Legal Obligations: Where necessary, we may process data to comply with legal obligations.

5. Who We Share Your Information With

We do not sell or rent your personal data to third parties. However, we may share your data with third-party service providers who help us manage our website, mailing lists, and analytics services, including:

- Google Analytics: For tracking website traffic and user behavior.

- Squarespace Analytics: For tracking website usage.

- Email marketing services: For managing mailing lists and sending newsletters (such as Mailchimp or other providers).

All third-party service providers used by us are GDPR-compliant and have their own privacy policies that align with GDPR requirements.

6. How We Protect Your Information

We are committed to safeguarding your personal data. We take appropriate technical and organisational measures to prevent unauthorised access, disclosure, alteration, or destruction of your personal data. Our website and data storage systems are secured using modern encryption technologies, and access to your data is restricted to authorised personnel only.

7. Your Data Protection Rights

As a UK or EU resident, you have the following rights under GDPR:

- Right to access: You have the right to request copies of your personal data.

- Right to rectification: You can ask us to correct inaccurate or incomplete data.

- Right to erasure: You can request the deletion of your personal data under certain conditions.

- Right to restrict processing: You have the right to ask us to limit the processing of your data.

- Right to data portability: You can request a copy of your personal data in a commonly used format.

- Right to object: You have the right to object to our processing of your personal data, including for marketing purposes.

To exercise any of these rights, please contact us at [contact@pania.com].

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.

9. Cookies

We use cookies on our Site to enhance your experience and gather information about website usage. You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. If you disable cookies, please note that some parts of our Site may become inaccessible or not function properly.

10. Third-Party Links

Our Site may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. When you leave our Site, we encourage you to read the privacy policy of every website you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page. You are advised to review this Privacy Policy periodically for any updates or changes.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, don't hesitate to get in touch with us at:

Pania - N. Connolly

Email: info@pania.com

Address: 60 Candleriggs, Merchant City, Glasgow, G1 1LE

---

This Privacy Policy is intended to comply with UK data protection laws, including the General Data Protection Regulation (GDPR).