Granta Network Solutions Ltd.

Last updated: August 2026

This policy explains how Granta Network Solutions Ltd. (“we,” “our,” or “us”) collects, uses, and protects personal data both through our website, granta.net, and through our Unmanned Aerial Systems (UAS) / drone operations.

We process personal data in accordance with the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025 (DUAA).

If we make changes to this notice, we will update this page and revise the “Last updated” date above. You can access our home page and browse our site without disclosing any personal data.

Part A. Our Website

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user-agent string, to help with spam detection.

An anonymised string created from your email address (a “hash”) may be shared with the Gravatar service to check whether you use it. Gravatar’s privacy policy is available at: https://automattic.com/privacy/.

Once your comment is approved, your profile picture is visible to the public alongside your comment.

Media

If you upload images to the website, avoid uploading images that include embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from images published on the site.

Contact forms

If you use the contact form to enquire about our services, we will use the details you provide to respond to your enquiry.

Cookies

If you leave a comment, you may opt in to having your name, email address, and website saved in cookies for your convenience, so you don’t have to re-enter these details when you comment again. These cookies last one year.

If you have an account and log in, we set a temporary cookie to check whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we also set cookies to save your login information and screen display choices. Login cookies last two days, and screen-option cookies last one year. If you select “Remember Me,” your login persists for two weeks. Logging out removes your login cookies.

If you edit or publish an article, an additional cookie is saved in your browser. This contains no personal data, it simply records the post ID of the article you edited, and expires after one day.

Embedded content from other websites

Pages on this site may include embedded content (e.g. videos, images, articles). Embedded content behaves exactly as if you had visited the other website directly — it may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that content, including if you’re logged into that other site.

Analytics [No analytics tool is currently named here — add the specific service(s) you use, e.g. Google Analytics, and what they collect, or remove this heading if none are in use.]

How long we retain website data

If you leave a comment, the comment and its metadata are retained indefinitely, so we can recognise and automatically approve genuine follow-up comments rather than holding them in a moderation queue. For any registered users, we also store the information held in their user profile.

All users can see, edit, or delete their personal information at any time (except their username). Website administrators can also see and edit that information.

Where we send website data

Visitor comments may be checked through an automated spam-detection service.

Part B. Drone (UAS) Operations

Data we collect

Our primary purpose is aerial imaging; surveying, photography, and mapping. In the course of this, our drone cameras may incidentally capture personal data, including:

Clear visual images of identifiable individuals (faces or distinctive clothing)
Vehicle registration plates
Images of private property or curtilages not visible from ground level

Our lawful basis for processing

We only process personal data captured by drone where there is a clear lawful basis:

Legitimate interests; for commercial surveying, media production, and structural inspections, where processing is necessary for our business functions and does not override your fundamental privacy rights.
Consent; where individuals have given explicit permission before filming.
Recognised legitimate interests; where operations involve public safety, crime prevention, or emergency response, under the DUAA 2025 framework.

Data minimisation and privacy by design

Flight planning; routes are pre-planned to avoid unnecessary overflight of private residential areas or densely populated spaces.
Anonymisation; where faces or number plates are captured inadvertently, we apply digital blurring or pixelation before any footage is finalised or published.
Retention; raw footage containing personal data is deleted within 30 days, unless it’s required for a contract, a legal claim, or a safety-incident investigation.

Part C. Who we share your data with

Other than the third parties described in this policy, the Gravatar and spam-detection services used for website comments, we do not share your personal data with third parties unless you have given us your consent to do so.

Part D. Your rights over your data

Whether your data comes from your use of our website or from our drone operations, you have the right to:

Access; request a copy of the personal data we hold about you.
Rectify; ask us to correct inaccurate data.
Erase; ask us to delete your personal data. This doesn’t cover data we’re obliged to keep for administrative, legal, or security purposes.
Restrict processing; ask us to limit how we use your data in certain circumstances.

If you have an account or have left comments on the site, you can request an export of the personal data we hold about you, including anything you’ve provided to us.

Part E. How to complain

You can raise a data protection complaint with us directly. In line with the Data (Use and Access) Act 2025, we operate a clear internal process for handling these complaints.

To lodge a complaint: email our Data Protection Officer at info@granta.net with the subject line “Data Protection Complaint.” For drone-related complaints, please include the date, time, and location of the flight concerned.

Our process: we aim to acknowledge your complaint within 5 working days, and to resolve it without undue delay and no later than 30 calendar days from receipt.

You are free to complain to the Information Commissioner’s Office (ICO) at any time, including before or alongside raising it with us. We simply ask that you consider giving us the chance to put things right first. ICO: https://www.ico.org.uk.

Contact information

For any privacy enquiries, or to exercise your data rights, email us at info@granta.net with the details of your request.