Privacy Policy Notice

• "we", "our" or "us" refers to the business, Snowdrop Solutions Ltd.
• "you", "the user" refers to the person or persons using this website.
• GDPR means the General Data Protection Regulation.
• PECR means the Privacy & Electronic Communications Regulation.
• ICO means the Information Commissioner's Office.
• CMP means Consent Management Platform.
• Cookies means small files stored on a user's device or computer.

This website is built with Next.js, a web development framework, and is hosted by Vercel. It uses Sanity as its content management system (CMS). Image assets are served from the Sanity CDN (cdn.sanity.io). Sanity processes and stores editorial content on servers located within the European Union and acts as a data processor for that content under the GDPR.

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are registered with the Information Commissioner's Office (ICO) as a data controller.

The lawful basis we rely on depends on the purpose for which we process your personal data:

Where we rely on consent, you may withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out before consent was withdrawn.

Where we rely on legitimate interests, we will only process your personal data where our interests are not overridden by your interests, rights or freedoms.

We do not share your personal information with third parties except as described in this Privacy Policy.

If the lawful basis for processing your personal data changes, we will update this Privacy Policy and, where required, notify you of the change.

We do not share your personal information with third parties except as described in this policy.

Under the GDPR, you have the following rights in relation to your personal data:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• The right not to be subject to automated decision-making, including profiling

You may exercise these rights by contacting us using the details provided in this Privacy Policy.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe that we have not handled your personal data appropriately. You can find further information on the ICO's website at (www.ico.org.uk)

We will handle requests relating to your data protection rights in accordance with applicable data protection legislation.

Retention

Data is retained for as long as necessary to handle your enquiry and, once resolved, for the period required to meet any applicable legal obligations.

This website includes a contact form through which you can send us enquiries. The data we collect through this form is:

• Name
• Email address
• Message

Purpose

To manage and respond to enquiries received. We do not use this data for any other purpose without your prior consent.

Retention

Data is retained for as long as necessary to handle your enquiry and, once resolved, for the period required to meet any applicable legal obligations.

Recipients

Data is accessible only by the internal team at Snowdrop Solutions Ltd. It is not shared with third parties except where required by law.

We use cookies on this website to provide you with a better user experience. We do this by placing a small text file on your device or computer hard drive to track how you use the website, to record or log whether you have seen particular messages that we display, to keep you logged in where applicable, or to display relevant content.

Some cookies are strictly necessary for the website to function. Non-essential cookies, such as analytics cookies, are only activated if you have given your prior consent through our cookie management panel.

We categorise our cookies into the following groups:

- Necessary: Essential for the website to function (e.g. security, consent preferences). These are set by default

- Performance: Help us to understand how you interact with the site so we can improve it

- Analytics: Track site usage and visitor numbers

- Targeting: Used to provide more relevant advertising content

- Unclassified: Cookies we are in the process of classifying

We use a Consent Management Platform (CMP) to comply with the GDPR and the ePrivacy Directive. This tool is displayed when you first access the website and allows you to accept, reject or customise the use of cookies by category.

No non-essential cookies are activated before you give your consent. Your preferences are securely recorded and stored. You can modify or withdraw your consent at any time by accessing the cookies preferences panel available on the site. Please note that we align with current regulations, including the UK Data (Use and Access) Act 2025 (DUAA) and the Spanish LOPDGDD, regarding how and when these are set.

Your web browser should provide you with controls to manage and delete cookies from your device. For more information, see the guidance on managing cookies in [Chrome], [Safari], [Microsoft Edge] or [Firefox].

We use Google Tag Manager (GTM), a tag management system provided by Google LLC, to centralise and control third-party scripts running on this website, including Google Analytics 4.

GTM itself does not collect personal data or set its own cookies. It acts solely as a container that manages when and how other tags are loaded. All tags configured in GTM are subject to the consent preferences you have indicated through our cookie management panel: no non-essential tag fires without your prior consent.

Google LLC may act as a data processor in relation to container configuration data. For more information, please refer to Google's privacy policy: policies.google.com/privacy

We use Google Analytics 4 (GA4) to analyse website usage and improve performance. Google LLC acts as a data processor and may transfer and process data on servers located in the United States.

Google LLC is certified under the EU-US Data Privacy Framework (DPF), which provides a lawful basis for such data transfers. Should this framework be invalidated, Google has Standard Contractual Clauses (SCCs) in place as an alternative safeguard.

Analytics tracking is only activated if you have given your consent through the cookie management panel. If you do not consent, no browsing data will be collected.

For more information on Google's privacy practices, please visit: policies.google.com/privacy

We use OpenAI's advertising services, including the OpenAI Measurement Pixel, to measure the effectiveness of our advertising campaigns on ChatGPT and attribute conversions to advertising interactions.

The OpenAI Measurement Pixel may collect a unique click reference known as oppref from the URL of a user who visits our website after interacting with a ChatGPT advertisement. This information is stored in a first-party __oppref cookie on our website and may be used to attribute subsequent visits or conversion events to the relevant advertising campaign.

The OpenAI Measurement Pixel is only activated if you have given your consent through the cookie management panel. If you do not consent, the pixel will not be activated and the __oppref cookie will not be set.
For more information about OpenAI's privacy practices, please refer to OpenAI's Privacy Policy and Cookie Policy.

We ensure the security of any personal information we hold by using secure data storage technologies and precise procedures in how we store, access and manage that information. Snowdrop Solutions is ISO 27001 certified and has a number of protections and controls in place to ensure personal information is secure.

We have provided some further explanations about user privacy and the way we use this website to help promote a transparent and honest user privacy methodology.