Where we keep it

We are based in the UK, and we store our data within the EU. Some organisations which provide services to us may transfer personal data outside of the EU, but we will only allow them to do if your data is adequately protected. For example, some of our systems use Microsoft products. As a US company, it may be that using their products result in personal data being transferred to or accessible from the US. However, we will allow this as we are certain personal data will still be adequately protected (as Microsoft is certified under the USA's Privacy Shield scheme). With regards Google Analytics, you can read more about how Google complies with data protection laws including GDPR here:

https://privacy.google.com/businesses/compliance/ https://support.google.com/analytics/answer/6004245