1. Who we are and how to contact us
Culfin Data Solutions is responsible for the personal information described in this notice (the data controller for those activities).
For privacy questions, requests or concerns, email info@culfin.org. If you need to correspond by post, contact us using that address to obtain the appropriate correspondence details.
This notice is intended for people visiting our public website, sending an enquiry, or communicating with us about our services.
2. Information we collect
- Enquiry details: your name, email address, any phone number you choose to provide, and the contents of your message.
- Communications: information exchanged with us by email or during follow-up discussions.
- Technical information: information ordinarily recorded by web hosting and security systems, which may include IP address, browser type, time of access and pages requested.
We ask you not to send sensitive personal data through the general contact form unless we have specifically requested it through a suitable channel.
3. How and why we use information
| Purpose | Lawful basis under UK GDPR |
|---|---|
| Responding to enquiries and discussing services | Our legitimate interest in handling enquiries and communicating with prospective or existing customers; where relevant, taking steps at your request before entering a contract. |
| Maintaining website security, preventing abuse and troubleshooting | Our legitimate interest in providing and protecting a functioning, reliable website. |
| Keeping information where required by law or in connection with legal claims | Compliance with a legal obligation, or our legitimate interest in establishing, exercising or defending legal rights, as appropriate. |
We do not automatically enrol you in a marketing mailing list simply because you submit the contact form. Any separate marketing activity will need to follow applicable data protection and electronic marketing rules.
5. How long we keep information
We keep enquiry and correspondence information for no longer than reasonably needed to respond, manage an ongoing business relationship, keep necessary records or deal with legal obligations or disputes. The relevant period depends on the nature and outcome of the enquiry. We review information for continued necessity and remove it when it is no longer required.
Hosting and security logs are retained according to operational and security needs and any applicable provider arrangements, rather than indefinitely.
6. Your data protection rights
Depending on the circumstances and lawful basis, you may have rights to access your information, have inaccuracies corrected, request erasure, restrict processing, object to certain uses, or receive and transfer information. Where we rely on consent, you may withdraw it.
You have a right to object to processing based on legitimate interests, subject to applicable legal conditions. You also have an absolute right to object to processing for direct marketing.
To exercise a right, email info@culfin.org. We may need proportionate information to verify your identity. We aim to respond without undue delay and within the time limits set by law, normally one calendar month; limited extensions may apply.
7. Questions, complaints and changes
Please contact info@culfin.org first if something about our handling of your personal information concerns you. We will consider complaints and respond in accordance with applicable requirements.
You may also complain to the Information Commissioner's Office (ICO), the UK data protection regulator. Its website is ico.org.uk.
We may update this notice to reflect changes in how the website operates or changes in legal requirements. The date at the top indicates the latest review.
Get in touch and we'll help you find the right information.