Privacy policy
Controller
The controller of personal data collected through this website is Just Thrifted Ltd, trading as Newby Dispute Resolution, Belmount Suite, Paragon Business Park, Chorley New Road, Bolton, BL6 6HG. Contact: roger@newbydisputeresolution.com.
Where your data is processed, and what not to send
This website and its enquiry forms are hosted by Netlify, Inc. in the United States. A message sent through a form is therefore stored, briefly, on servers outside the United Kingdom before it is emailed to us. Netlify processes it under a data processing agreement incorporating the UK International Data Transfer Addendum.
For that reason the forms are for an outline of your enquiry only. Please do not send confidential documents, medical information, financial details or case papers through the website. Once an appointment is agreed, documents are exchanged by secure means agreed with the parties, and held in the United Kingdom. Form submissions are deleted from the hosting provider once they have been received by email.
What we collect and why
Enquiry forms and email
When you send an enquiry we collect your name, contact details and the outline of your message. We use it to respond to you, carry out conflict checks and, if an appointment follows, to set it up.
- Lawful basis: legitimate interests (responding to an enquiry you sent us) and, where an appointment follows, performance of a contract. Where a message includes special category data, we rely on Article 9(2)(f) UK GDPR (establishment, exercise or defence of legal claims).
- Retention: enquiries that do not lead to an appointment are deleted after 12 months. Appointment records are kept for six years after the mediation, in line with limitation periods, then deleted.
Mediation appointments
Position papers, bundles and correspondence provided for a mediation are used only for that mediation, held securely in the United Kingdom, and deleted or returned in accordance with the agreement to mediate. Where an appointment is made through a mediation provider or panel, that provider is a separate controller of the data it holds, under its own privacy notice.
Website
The site sets no cookies and runs no analytics. See the cookie policy. Our hosting provider processes server logs (IP address, pages requested) for security and delivery.
Who processes it
- Hosting and form handling: Netlify, Inc. (United States).
- Source code hosting: GitHub, Inc. (United States). No personal data is stored there.
- Email: Google LLC (Google Workspace), with data held in the United Kingdom or European Economic Area where the service allows.
Where a processor is outside the UK, transfers rely on the UK International Data Transfer Agreement or Addendum, or on UK adequacy regulations (including the UK–US data bridge) where they apply.
Your rights
Under UK GDPR you can ask for access to your data, correction, erasure, restriction, portability, and to object to processing based on legitimate interests. Write to roger@newbydisputeresolution.com. You can complain to the Information Commissioner's Office (ico.org.uk).
Changes
Material changes to this policy will be posted on this page.