Introduction

At Pantheon, we are committed to safeguarding the privacy of our website visitors and service users. This policy applies to information we collect about individuals who interact with our organisation. It describes how we collect, use, and process personal information, and how, in doing so, we comply with our legal obligations to you. Your privacy is of utmost importance to us, and we are dedicated to protecting and respecting your privacy rights.

Information We Collect

We may collect and process the following types of information about you:

• Personal Contact Details: Such as your name, email address, postal address, and telephone number when you fill out our contact form, sign up for our newsletter, or purchase our products and services.
• Payment Information: Your credit/debit card details and other payment information when you make a purchase. Note that Pantheon does not store credit card details; these are processed by our secure payment processors. We also do not take payments through the site.
• Technical Data: Including your IP address, browser type and version, and other technology on the devices you use to access our website.
• Usage Data: Information about how you use our website, products, and services.

How We Use Your Information

We use your information to:

• Provide, operate, and maintain our services.
• Improve, personalise, and expand our services.
• Understand and analyse how you use our services.
• Develop new products, services, features, and functionality.
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes.
• Process your transactions and send you related information, including confirmations and invoices.
• Send you technical notices, updates, security alerts, and support and administrative messages.

Sharing Your Information

We will not share your information with any third parties except as described in this policy or as required by law. This may include:

• Third-party service providers who process information on our behalf to help run some of our internal business operations including email distribution, IT services, and customer services.
• Law enforcement or regulatory agencies, subject to a lawful request.
• Third parties in connection with a company transaction, such as a merger, sale of assets, or shares, reorganisation, financing, change of control, or acquisition of all or a portion of our business by another company or third party, or in the event of bankruptcy or related or similar proceedings.

Your Rights

Under the Data Protection Act 2018 and GDPR, you have various rights in relation to your personal data, including the right to:

• Request access to the personal data we hold about you.
• Request correction of your personal data that is in our custody or control.
• Request deletion of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us.

Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

Changes to This Policy

We may update this policy from time to time. We will notify you of any changes by posting the new policy on this page. We encourage you to review this policy periodically for any changes.