Privacy Policy

This website is owned and operated by Thomas Brock.

Data controller (referred to as “we/us/our”): Custodia Technology

Our principal place of business is at The Garden Suite, Booths Hall, Knutsford, Cheshire, WA16 8GS.

You can contact us:

• by post, to the postal address given above;
• using our website contact form;
• by telephone: +44 (0) 203 984 7629
• by email : getcompliant@custodiatechnology.com

 

Categories of Personal Information We Collect

We collect or use the following information from our website to provide and improve our services and for information updates or marketing purposes:

• Name;
• Employer and job title;
• Business email address;
• Business telephone number;
• Company information;
• Marketing Preferences
• Event registration details
• IP Addresses
• Usage Data (including information about how you interact with and use our website, products, and services)
• IP address;

 

When you visit our website, we may automatically collect:

• Browser type and version;
• Device information;
• Operating system;
• Date and time of website access;
• Pages viewed;
• Referring website addresses;
• Website navigation activities; and
• Cookie and similar technology information.

 

For the exhaustive list of cookies we collect see the “How we use cookies” section.

 

How we use personal data 

We process personal information to:

• Operate and maintain our website;
• Respond to inquiries and requests;
• Provide product demonstrations;
• Improve our products and services;
• Send administrative communications;
• Conduct analytics and reporting;
• Send marketing communications where permitted by law;
• Comply with legal and regulatory obligations.

 

We may send information regarding:

• Product updates;
• Industry developments;
• Regulatory insights;
• Events and webinars;
• Whitepapers and reports; and
• Company news.

 

Where required by applicable law, we will obtain consent before sending marketing communications. You may unsubscribe at any time by using the unsubscribe link in our communications or contacting us directly.

 

Lawful Bases for Processing 

Where UK GDPR or EU GDPR applies, we rely upon one or more of the following lawful bases:

Contract – we have to collect or use the information so we can enter into or carry out a contract with you.

Legitimate interests – we’re collecting or using your information to enhance the quality and efficiency of the services we provide. We also collect and use personal information to understand your needs and provide you with a better service, and in particular to periodically send promotional emails about new products other information which we think you may find interesting using the email address which you have provided. From time to time, we may also use your information to contact you by email or phone for market research purposes. We may also use the information to customise the website according to your interests.

Legal obligation – we have to collect or use your information so we can comply with applicable laws, respond to regulatory requests or fulfil legal reporting obligations.

Consent - Where required by law, we rely on consent for certain marketing communications and optional cookies and tracking technologies. You do have the right to withdraw your consent at any time.

You can find out more about lawful basis on the ICO’s website.

 

Sharing of Personal Information 

Due to the integrated nature of our business systems, personal information processed on the website may be shared with connected systems and authorised service providers. Such third parties operate under their own privacy notices and policies.

Internal Sharing

Personal information may be shared with:

• Sales teams
• Marketing teams
• Compliance, legal and security teams

Integrated Software Platforms

The website may exchange personal information with:

• CRM systems
• Marketing automation platforms
• Analytics tools

Third-Party Service Providers

We may share personal information with:

• Analytics providers
• Auditors

Legal Requirements

We may disclose personal information where required by law, regulation, court order, government request or to protect our legal rights.

 

Sharing Information Outside the UK 

Where necessary, we may share your personal information and transfer your personal information outside of the UK.

Transfers may occur:

• Between our group companies
• To service providers located outside the UK or EEA
• To integrated software providers operating globally

 

Where personal information is transferred outside the UK or EEA, we implement appropriate safeguards, including:

• UK International Data Transfer Agreement (IDTA)
• UK Addendum to EU Standard Contractual Clauses
• European Commission Standard Contractual Clauses
• Other legally approved transfer mechanisms

 

We also employ additional safeguards where appropriate, including industry-standard encryption, web application firewall protections, and other contractual, technical, and organizational security measures. Copies of applicable safeguards can be requested from the Data Protection Officer.

 

How Long We Keep Information

 

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal or reporting requirements.

Retention periods may vary depending on:

• Contractual requirements
• Legal obligations
• Regulatory requirements
• Operational needs
• Dispute resolution requirements

 

Once the data is no longer needed for its original purpose, we will securely delete it. In some circumstances, we may anonymise your personal information so that it can no longer be associated with you, in which case we may use that information without further notice to you. We regularly review our data retention practices to ensure compliance with applicable laws and regulations.

 

Security Measures 

We implement appropriate technical and organisational measures to protect personal information, including:

• Encryption in transit and at rest
• Access controls and role-based permissions
• Multi-factor authentication
• Security monitoring and logging
• Vulnerability management
• Incident response procedures
• Regular security reviews and testing
• Employee confidentiality obligations

 

Your Privacy Rights 

Depending on your jurisdiction, you may have rights including:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to data portability
• Right to withdraw consent
• Right not to be subject to certain automated decision-making processes

 

Residents of certain US states may also have additional privacy rights under applicable state laws.

To exercise your rights, please contact:

Email: fernando.cacere@custodiatechnology.com

We may request information necessary to verify your identity before processing your request.

 

California Residents 

This section applies to California residents and supplements this Privacy Policy in accordance with the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").

 

Personal Information We Collect

We may collect the categories of personal information described in this Privacy Policy, including:

Identity Information Identifiers (e.g., name, email address, telephone number, and other contact information);

Professional information (e.g., employer, job title);

System Usage Information (e.g. IP address, browser type, operating system, device information, online identifiers, and other information about your interaction with our website );

General location data; and

Other personal information you choose to provide to us.

 

How We Use and Disclose Personal Information

We collect, use and disclose personal information to:

We process personal information to:

• Operate and maintain our website;
• Respond to inquiries and requests;
• Provide product demonstrations;
• Improve our products and services;
• Send administrative communications;
• Conduct analytics and reporting;
• Send marketing communications where permitted by law;
• Comply with legal and regulatory obligations.

 

We may disclose personal information to service providers, contractors, affiliated companies, professional advisers, and authorities where permitted or required by law.

 

Sale and Sharing

We do not sell personal information for monetary consideration. We may use certain analytics or advertising technologies that may constitute "sharing" under California law. California residents may exercise any applicable opt-out rights.

 

Your California Privacy Rights

Subject to applicable law, California residents may request to:

• Know what personal information we collect, use and disclose;
• Access specific personal information we hold about them;
• Correct inaccurate personal information;
• Delete personal information;
• Obtain a portable copy of their personal information;
• Opt out of the sharing of personal information; and
• Limit certain uses of sensitive personal information, where applicable.

 

We will not discriminate against you for exercising your privacy rights.

 

Exercising Your Rights

To exercise your rights, please contact:

Email: fernando.cacere@custodiatechnology.com

We may request information necessary to verify your identity before processing your request. Authorised agents may submit requests on behalf of California residents where permitted by law.

 

Retention 

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and protect our legal rights.

 

How we use cookies 

Our website uses cookies. A cookie is a small file which asks permission to be placed on your computer’s hard drive. The cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use Google Analytics to analyse the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google’s privacy policy is available at: https://www.google.com/policies/privacy/.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. Blocking all cookies will have a negative impact upon the usability of many websites. If you block cookies, you will not be able to use all the features on our website.

 

Complaints 

If you are located in the UK, you may lodge a complaint with the Information Commissioner's Office (ICO).

If you are located in the European Economic Area or in the US, you may lodge a complaint with your local supervisory authority.

We encourage individuals to contact us first so that we can work to resolve any concerns.

 

Contact us 

If you have any questions about this Privacy Policy or our privacy practices, or if you have a disability and need to access this notice in a different format, contact us at:

getcompliant@custodiatechnology.com.