Last updated: 13 October 2026

1. Who we are and what this policy covers

Bloc Draig Ltd is the data controller for personal information processed for the purposes described here. We are registered in England and Wales with company number 15617462. Our registered office is Bloc Draig Ltd, International House, 10 Churchill Way, Cardiff, CF10 2HE, United Kingdom.

This policy covers visits to blocdraig.com and business enquiries addressed to Bloc Draig Ltd.

Separate privacy notices apply to our products and services. Other companies are responsible for their own privacy notices.

We handle personal information under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable privacy and electronic communications law, as amended.

For privacy questions or requests, email [email protected] or write to our registered office.

2. Information we process and why

Website operation and security. Our website is hosted in the UK. Hosting systems may process your IP address, request times, requested pages, browser information and error or security logs. We use this information to deliver the website, diagnose faults and prevent misuse. Our lawful basis is our legitimate interest in operating a reliable, secure website.

Business enquiries. If you contact us by email or post, we process the contact details, message contents and project information you provide. We use them to respond, discuss projects and maintain relevant correspondence. Our lawful basis is our legitimate interest in responding to enquiries and managing business relationships. Where necessary to take steps at your request before entering a contract with you, or to perform that contract, we rely on the contractual lawful basis instead.

Legal and administrative requirements. We may retain relevant correspondence and business records to meet legal obligations or establish, exercise or defend legal claims. We rely on a legal obligation where the law requires processing, or our legitimate interest in protecting our legal rights where it does not.

We collect correspondence directly from you. Technical information comes from your browser or device. Providing enquiry information is voluntary, but we may be unable to respond or discuss a project without relevant contact details and context.

3. Analytics and cookies

We use self-hosted Plausible Analytics to understand website usage and improve its content. Plausible measures visits and page views, referral sources, approximate location and browser, operating system and device type. It processes IP addresses and browser information without retaining raw IP addresses in its analytics data.

Plausible does not use cookies or browser local storage and does not track visitors across websites or across days. We operate the analytics service ourselves. Where analytics involves personal information, our lawful basis is our legitimate interest in understanding and improving this website.

4. Who may receive information

Access is limited to people who need information for the purposes above. Recipients may include authorised staff and contractors, our hosting provider, email and IT service providers handling correspondence, and professional advisers such as accountants or solicitors. Providers acting on our behalf must protect information and process it under appropriate contractual arrangements.

We may disclose relevant information where legally required, to protect legal rights, or in connection with a business transfer subject to appropriate confidentiality and data protection safeguards. We do not sell personal information.

5. International transfers

Our website server is located in the UK. UK hosting does not necessarily mean all related processing stays in the UK: other service providers may process information abroad. Where we make a restricted transfer outside the UK, we must use a lawful transfer mechanism.

This may be applicable UK adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with the assessment required by UK law. Contact us for details of transfers relevant to your information and a copy of applicable safeguards, with confidential information redacted where necessary.

6. How long we keep information

We keep personal information only for as long as needed for its purpose. For website logs, we assess the period needed to investigate faults, detect abuse and resolve security incidents. For enquiries, we consider whether the enquiry is open, whether follow-up is reasonably expected and whether it becomes a client project.

For contractual, accounting or legal records, retention depends on statutory record-keeping requirements and relevant claim limitation periods. We may keep relevant records longer where a dispute or legal requirement requires it. Analytics records are retained only while needed to assess website usage and trends; statistics that no longer identify anyone may be kept longer. We delete or anonymise personal information when it is no longer needed.

7. Security

We use appropriate technical and organisational measures to protect personal information, including restricting access and maintaining our hosting systems. No system or internet transmission is completely secure.

8. Your rights

Depending on the circumstances and lawful basis, you may ask for access to your personal information, correction, erasure, restriction of processing or a portable copy of information you provided. These rights have legal conditions and exceptions.

Your right to object: you may object to processing based on legitimate interests for reasons relating to your particular situation. We must stop unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims. You can object to direct marketing at any time, and we must stop processing for that purpose.

Where we rely on consent, you may withdraw it at any time by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects as part of this website or its enquiry handling.

To exercise your rights, contact us using the details above. You do not have to use a particular form or legal wording. We normally respond within one month, subject to lawful extensions or pauses. We may request information reasonably needed to verify your identity. Requests are normally free; we will explain any lawful fee or refusal and your options for challenging it.

9. Complaints

Please contact us if you are concerned about our handling of personal information. We will acknowledge a data protection complaint within 30 days and investigate and respond without undue delay.

You also have the right to complain to the UK's Information Commissioner's Office (ICO). Visit ico.org.uk/make-a-complaint or telephone 0303 123 1113. Contacting us does not remove your right to complain to the ICO or seek a legal remedy.

10. Other websites and services

Linked websites and services have their own privacy notices. Please read those notices before providing personal information.

11. Changes to this policy

We will update this policy when our processing or legal requirements change. The date above shows the latest update. Where required, we will bring material changes to your attention and obtain consent for new processing that requires it. Our website Terms explain its conditions of use.