Draft for legal review. This document is a professional UK-oriented draft prepared for Coreridge Solutions. It must be reviewed and approved by a qualified adviser, and company registration details completed, before it is relied upon.
Who we are
Coreridge Solutions is a UK data, performance and business intelligence consultancy and is the data controller for personal data collected through this website. Registered company name, number and address are to be confirmed and inserted here. Enquiries about this policy can be sent to info@coreridgesolutions.co.uk.
Personal data we collect
- Enquiry details you submit: name, organisation, work email address, sector, the support you are seeking, your description of the requirement and your preferred contact method.
- Correspondence you send us by email or during a call.
- Basic technical information generated when your browser requests pages from this site, used for security and reliability.
Why we use it and our lawful basis
- To respond to your enquiry and arrange a discovery call — legitimate interests, and steps towards entering a contract where you are seeking services.
- To deliver and administer consultancy engagements — performance of a contract.
- To keep records for accounting, insurance and dispute purposes — legal obligation and legitimate interests.
Marketing
We do not add enquirers to a marketing list without consent. If we introduce a newsletter, it will be opt-in and every message will carry an unsubscribe link.
Sharing and processors
We do not sell personal data. We use trusted service providers to host this website, store enquiry records and deliver email notifications, each acting on our instructions under a written agreement. We may disclose information where required by law.
Client data during engagements
Where an engagement requires access to data containing personal information, we act as a processor on the client's instructions under a separate written agreement, including confidentiality, security measures, sub-processor terms and return or deletion of data at the end of the engagement. Wherever possible we work with anonymised, pseudonymised or aggregated data.
Retention
Enquiry records are kept for up to 24 months from the last contact where no engagement follows. Engagement records are kept for the period required by our professional, insurance and tax obligations, normally six years after the end of the relationship.
Security
Enquiry submissions are validated and transmitted over encrypted connections and stored in access-controlled systems. Access is limited to the people who need it to respond to you or deliver an engagement.
International transfers
Some providers may process data outside the UK. Where that happens we rely on UK adequacy regulations or the International Data Transfer Agreement or Addendum, with appropriate safeguards.
Your rights
You have the right to access your personal data and to request rectification, erasure, restriction, portability or objection to processing, and to withdraw consent where consent is the basis. Contact info@coreridgesolutions.co.uk to exercise these rights. If you are unhappy with our response you may complain to the Information Commissioner's Office at ico.org.uk.
Changes
We will update this policy when our processing changes and will publish the revised version on this page.
Questions about this document can be sent to info@coreridgesolutions.co.uk.