Privacy notice

Desktop Pathline (“we”) is the controller for personal data we collect through this website and through ordinary studio correspondence. We are based at 22 Wade Lane, Saltcotes, FY8 4UZ, United Kingdom. Email hello@desktop-pathline.click. Telephone 07067711941.

What we collect

From an enquiry: name, email, public body, chosen commission, preferred week, and the message you write. From a commission: the business contact details of named officers, purchase-order references, and — only when your information-governance lead has agreed a route — extracts or complaint files that may contain personal data of residents. We do not ask for special category data on the website form.

Why we use it

Enquiries are processed to take steps toward a contract, or (if you are simply asking a question) on our legitimate interest in answering professional correspondence. Commission files are processed to perform the contract and to meet our legal duties to keep accounting records. Cookie preferences are stored on your device; see the cookies page.

Retention

Unsuccessful enquiries are kept for twelve months, then deleted from the mailbox archive unless a public-body retention rule you impose requires longer. Contracts, invoices, and unpaid-fee records are kept for six years after the end of the financial year. Resident-level extracts are returned or destroyed within thirty days after we send the final pack, unless your data-sharing note sets another period. Backup media, if used, are overwritten on the same timetable.

Processors and sharing

We use an email host and an accountant in the United Kingdom. We do not sell lists. We may disclose information if required by a court, the Information Commissioner’s Office, or a lawful audit of your authority that names our work.

International transfers

We aim to keep enquiry and commission files on systems in the United Kingdom. If a processor stores a copy in the European Economic Area, we rely on the UK’s adequacy arrangements then in force. We will not send resident-level extracts to a country without an adequacy decision unless a written addendum says so and appropriate safeguards are in place.

Your rights

Under UK GDPR you may ask for access, correction, erasure, restriction, or objection, and you may ask for a portable copy of data you provided. You may complain to the Information Commissioner’s Office (ico.org.uk). These rights may be limited where we must keep invoices or where your authority, not we, is the controller of a resident file we only hold as a processor — in that case we will direct you to the authority.

Processor role

When we read an extract supplied by a public body, that body is usually the controller and we act on documented instructions. The website enquiry itself is our own controller processing.