Privacy Statement
How Cipherstone Limited collects, uses, protects and manages personal information.
1. Scope
This statement explains how Cipherstone Limited (“Cipherstone”, “we”, “us” or “our”) processes personal information when you use cipherstone.co.uk, contact us, make an enquiry or otherwise interact with us in a professional capacity.
2. Information we may process
- Identity and professional information, such as your name, role, employer and business contact details.
- Enquiry and correspondence information you choose to provide.
- Technical and security information necessary to operate, secure and troubleshoot the website and contact form.
- Business-relationship information relevant to meetings, proposals and professional communications.
3. Purposes and lawful bases
| Purpose | Typical UK GDPR lawful basis |
|---|---|
| Responding to enquiries and discussing potential engagements | Legitimate interests and, where relevant, steps taken at your request before entering into a contract. |
| Delivering and administering professional services | Contract, legitimate interests and legal obligation, as applicable. |
| Protecting the website, contact form and information systems | Legitimate interests in preventing abuse, maintaining security and protecting our business and users. |
| Meeting legal, regulatory, tax, accounting and professional obligations | Legal obligation and legitimate interests, as applicable. |
| Relevant business-to-business communications | Legitimate interests, subject to applicable direct-marketing and electronic-communications requirements. |
4. Website hosting, form delivery and anti-abuse protection
Our website is hosted on Cloudflare Pages. The enquiry form is processed using Cloudflare serverless infrastructure and Cloudflare Turnstile is used to distinguish legitimate visitors from automated abuse. Turnstile processes technical signals needed to provide that security function; it does not receive the contents of the enquiry form from us. Form submissions are delivered to our enquiry mailbox using Cloudflare Email Service configured for Cipherstone. More information about Turnstile is available in Cloudflare’s Turnstile Privacy Addendum.
5. Sharing and processors
We may use carefully selected providers for hosting, communications, security, professional support and other business operations. We require appropriate confidentiality and data-protection safeguards where applicable. We do not sell personal information.
6. International transfers
Where personal information is transferred outside the United Kingdom, we will use an appropriate lawful transfer mechanism and safeguards where required, taking account of the recipient, destination and nature of the processing.
7. Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, regulatory, contractual, tax, security and professional requirements. Enquiries that do not lead to an engagement are periodically reviewed and deleted when no longer required.
8. Security
We apply proportionate organisational and technical measures designed to protect personal information against unauthorised access, loss, alteration or disclosure. Internet services cannot guarantee absolute security, but we seek to use controls appropriate to the nature and sensitivity of the information processed.
9. Your rights
Depending on the circumstances, you may have rights to be informed, obtain access, request rectification or erasure, restrict processing, object to certain processing, receive certain information in portable form and withdraw consent where consent is relied upon. These rights are subject to legal conditions and exemptions.
To exercise a right, email enquiry@cipherstone.co.uk. We may need to verify your identity before acting on a request.
10. Complaints
You can raise a privacy or data-protection complaint with Cipherstone at enquiry@cipherstone.co.uk or through our Complaints Procedure. If you remain dissatisfied, you may have the right to complain to the UK Information Commissioner’s Office (ICO) using its complaints service.
11. Changes to this statement
We may update this statement to reflect changes in our services, processing activities, legal requirements or regulatory guidance. The current version will be published on this page.