1 Mill Street – privacy policy

What is this Privacy Policy Statement

We have produced a short privacy statement to clearly outline when we may collect your personal information and what we do with it.

Who are we?

1 Mill Street is the data controller. This means we decide how your personal data is processed and for what purposes.

How do we process your personal data?

1 Mill Street complies with its obligations under GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

Why do we collect your data?

  •  To operate the 1 Mill Street website and mailing subscriptions and to deliver the services that individuals have requested
  •  To inform individuals of news, events, training, activities or services
  •  To contact individuals via surveys to conduct research about their opinions of current services or of potential new services that may be offered.

The legal basis for collecting your personal data:

Under Article 6:

We send you information based upon your consent for us to do so. We give you access and the ability to manage your subscription settings and update these at any time via links in all email communications, by contacting us directly via: or via the website.

Under Article 9

In some cases, where we are employing staff or working directly with particularly vulnerable people we may be required to collect special category personal data and their data will be processed under article 9.

In these cases we will either gain:

  •  Explicit consent of the data subject or inform them that
  •  Processing is necessary for carrying out obligations under employment, social security or social protection law, or a collective agreement.

Sharing your information:

We are subject to the law like everyone else. Sometimes, we must process your information in order to comply with a statutory obligation. For example, we may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order.

This may include your personal information.

Other than in these circumstances you can be assured that we will not share your personal information with third parties for marketing purposes.

Data Protection Legislation:

Any information provided will be used and protected in accordance with the relevant data protection legislation including the Data Protection Act 2018, the General Data Protection Regulations (EU 2016/679) and any subsequent legislation as appropriate.

Access to your own information:

You may obtain a copy of any information we hold about you by sending us a request at

After receiving the request, we will tell you when we expect to provide you with the information, and whether we require any fee for providing it to you.

Removal of your information:

If you wish us to remove personally identifiable information from our systems, you may contact us at

This may limit the service we can provide to you.

Verification of your information:

When we receive any request to access, edit or delete personal identifiable information we shall first take reasonable steps to verify your identity before granting you access or otherwise taking any action. This is important to safeguard your information.

Updating our records:

If you wish to amend or remove your contact preferences, update your details, receive a copy of the personal information we hold about you, transfer that data to another supplier, object to or restrict our processing of your data or be removed from our records please contact We may need to contact you if there are any queries relating to your request. In some instances we may retain data relating to our contractual, regulatory and legal obligations.

If you have any concerns as to how your data is processed you can contact: Nigel Shanahan our Founder and Data Protection Officer at or you can write to us at:

1 Mill Street, Leamington Spa, Warwickshire, CV31. 1ES, UK

What is this Privacy Policy for?

This privacy policy is for this website and any other subsidiary services hosted via a domain, served by 1 Mill Street and governs the privacy of its users who choose to use it.

The policy sets out the different areas where user privacy is concerned and outlines the obligations & requirements of the users, the website and website owners. Furthermore, the way this website processes, stores and protects user data and information will also be detailed within this policy.

The Website:

This website and its owners take a proactive approach to user privacy and ensure the necessary steps are taken to protect the privacy of its users throughout their visiting experience. This website complies to all UK national laws and requirements for user privacy.