Skip to content

 

Privacy Notice

 

This privacy notice tells you what to expect us to do with your personal information.

What information we collect, use, and why

We collect or use the following information to provide and improve products and services, for the operation of client accounts and to comply with legal requirements for clients and potential clients:

  • Names and contact details
  • Addresses
  • Occupation
  • Usage data (including information about how you interact with and use our website, products and services).   Our website uses cookies as described in our separate Cookie Policy.
  • Services, invoice and transaction data
  • Information relating to compliments or complaints
  • Records of correspondence, meetings and decisions
  • Any other personal information required to comply with legal obligations

We collect or use the following personal information for information updates or marketing purposes:

  • Names and contact details
  • Addresses
  • Marketing preferences
Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

The lawful basis we rely on may affect your data protection rights, which are set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details below.

Our lawful bases for the collection and use of your data

We rely on the following lawful bases for processing your personal information:

  • Contract.  We have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation. We have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
  • Legitimate interests. We are collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. 

Our legitimate interests are to:

  • Deliver effective services by maintaining client records and understanding business needs
  • Develop our business by contacting professionals who may benefit from our services
  • Maintain relationships with existing clients to offer relevant additional services
  • Ensure service quality through record-keeping and client feedback 

We have assessed that these interests are proportionate and do not override your privacy rights. We only process necessary information, provide easy opt-out options, and implement appropriate security measures. 

For more information about our legitimate interest assessment, please contact us using the details below.

Where we get personal information from
  • Directly from you
  • Publicly available sources
Who we share your information with

We may share your personal information with:

  • IT service providers for data hosting and system maintenance
  • Professional advisors, including accountants and lawyers
  • Regulatory bodies where required by law

We ensure all third parties have appropriate data protection measures in place.

International transfers

We do not routinely transfer personal information outside the UK for our business operations. However, our cloud service providers may store or process data in servers located outside the UK as part of their standard operations.

All such transfers are subject to:

  • Appropriate contractual safeguards with our service providers
  • Adequate data protection standards equivalent to UK GDPR
  • Regular review of our suppliers' data handling practices

If you have specific concerns about where your data is processed, please contact us.

Automated decision-making

We do not use automated decision-making or profiling in relation to your personal data.

How we protect your information

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction.

How long we keep information

We will retain the personal data provided to us in connection with the engagement of our services for the following periods:

  • If you have engaged with our services, information relating to the services provided together with any other personal data we have collected about you (as set out above) will be retained for a period of 8 years from the end of the engagement.
  • If your personal data is obtained from your LinkedIn account or other publicly available sources, we will store the relevant data for no longer than is necessary to pursue our legitimate interest (as set out above) and in any event, it will be deleted no more than 8 years following its initial collection.

This retention period reflects:

  • Professional indemnity insurance requirements
  • Statutory limitation periods for contract and negligence claims
How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details below.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Contact details

Cerdren Limited.  10 Comfrey Close Wokingham Berkshire RG40 5YN.  Company Registration Number: 7369175

Email: info@cerdren.com

Last updated – September 2025