Introduction

Welcome to Golden Thread Engine™. We are committed to protecting your personal data and your privacy. This policy explains how we collect, use, and safeguard your information when you interact with our "Call to Action" webforms and services.

​

Who We Are (The Data Controller)

The data controller responsible for your personal data is:

• *Company Name:* [Insert Legal Entity Name, e.g., Golden Thread Solutions Ltd]

• *Address:* [Insert Registered Business Address]

• *Email:* [Insert Privacy/DPO Email Address]

 

The Data We Collect

When you sign up via our webform, we collect:

• Identity Data: Name, job title, and company name.

• ⁠Contact Data: Email address and telephone number.

• Technical Data: IP address and browser type (collected via cookies for form security).

 

How and Why We Use Your Data

We process your data based on the following legal grounds:

• Consent: You have specifically opted-in to receive updates or marketing from the Golden Thread Engine.

• Legitimate Interest: To respond to your direct inquiries or to improve our Engine’s user experience.

• Contractual Necessity: If your sign-up is a precursor to a service agreement.

 

Data Retention & Security

• ⁠Retention: We keep your data only as long as necessary to fulfill the purposes we collected it for (e.g., as long as you remain a subscriber).

• Security: We use industry-standard encryption and secure servers to prevent unauthorized access or disclosure.

 

Your Rights

Under the GDPR and the 2026 Data Use and Access Act, you have the following rights:

• Access & Portability: You can request a copy of your data at any time.

• Correction: You can ask us to update inaccurate information.

• Erasure ("Right to be Forgotten"): You can request that we delete your data entirely.

• Withdrawal of Consent: You can opt-out of marketing via the "Unsubscribe" link in any email.

• Right to Complain: You have the right to lodge a complaint with a supervisory authority (e.g., the ICO in the UK).
  
  Note: As of 2026, we are required to acknowledge any data complaint within 30 days.

 

Third-Party Sharing

 

We do not sell your data. We only share data with essential service providers (such as our CRM or email delivery platform) who are contractually bound to protect your information under GDPR-compliant Data Processing Agreements (DPAs).