(Last Updated: March 2025)

1. Introduction

Graef & Co. Consulting Ltd. (“we,” “us,” “our”) is committed to protecting your privacy. This Privacy & Cookie Policy explains how we collect, use, and safeguard your personal data in accordance with UK GDPR and other applicable laws.

By using our website (www.graefco.com), you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

We may collect and process the following types of personal data:

• Contact Information – When you contact us via forms or email, we collect your name, email, phone number, and any additional information you provide.

• Website Usage Data – Collected via cookies for analytics, including:

  • IP address

  • Browser type & network details

  • Pages visited before arriving on this website

  • Pages visited within this website

  • Clicks, internal links, scrolling behavior, searches, and timestamps

• Communications Data – When you communicate with us via email or other channels.

3. How We Use Your Data

We process your personal data for the following purposes:

• To respond to inquiries and provide services

• To improve our website experience (via analytics)

• To comply with legal obligations

We do not sell or share your personal data with third parties for marketing purposes.

4. Website Hosting & Analytics

Website Hosting (Squarespace)

This website is hosted by Squarespace. Squarespace automatically collects the following information when you visit our website:

• Your browser, network, and device information

• Web pages you visited prior to coming to our website

• Web pages you view while on this website

• Your IP address

Why This Data is Collected:

Squarespace needs this data to operate our website securely and improve its services. The data is analyzed in a de-personalized form.

5. Website Analytics (Squarespace Analytics)

• This website collects personal data to power our site analytics, including:

• Your browser, network, and device details

• Web pages visited before arriving on this website

• Your IP address

Additionally, Squarespace Analytics may track:

• Clicks and internal links

• Pages visited

• Scrolling behavior

• Searches performed

• Timestamps of interactions

Why This Data is Collected:

We use this data to analyze site traffic, measure engagement, and improve user experience.

We do not use this data for personalized advertising.

6. Use of Fonts (Google Fonts & Adobe Fonts)

This website serves font files from Google Fonts and Adobe Fonts.

To properly display fonts, these third-party services may receive personal information, including:

• Information about your browser, network, or device

• Information about this site and the page you’re viewing on it

• Your IP address

7. Form Submissions

When you submit a form on our website, we collect the data requested in the form to track and respond to your submissions.

Who We Share This Data With:

• We share this data with Squarespace, which stores form submissions securely on our behalf.

• Your data is never shared for marketing purposes.

8. Cookies & Tracking Technologies

When you visit our website, we use cookies and similar tracking technologies to enhance your experience.

What Are Cookies?

Cookies are small text files stored on your device that help improve website functionality and track user behavior.

Types of Cookies We Use

• Essential Cookies – Necessary for website functionality (e.g., security, login sessions).

• Analytics & Performance Cookies – Used for tracking website traffic and engagement (via Squarespace Analytics).

Managing Cookies

You can accept, reject, or customize cookie settings via our cookie consent pop-up.

For details on cookies used by Squarespace, visit The cookies Squarespace uses.

9. Data Security & Retention

We implement appropriate technical and organizational measures to protect your personal data.

Your data is stored securely and is only kept as long as necessary for its intended purpose.

You can request deletion or modification of your data at any time by contacting compliance [at] graefco [dot] com.

10. Your Rights Under UK GDPR

As a UK or EU resident, you have the right to:

• Request access to your personal data.

• Request correction or deletion of your data.

• Object to or restrict data processing.

• Withdraw consent for data usage (where applicable).

To exercise your rights, contact us at: compliance [at] graefco [dot] com.

11. Changes to This Privacy & Cookie Policy

We may update this policy from time to time.

• Any changes will be posted on this page with an updated date.

For questions or GDPR-related requests, contact us at compliance [at] graefco [dot] com.