Privacy Policy
Effective Date: July 2026 · Ciantos Group · London, United Kingdom · ciantos.co.uk
1. Data Controller Information
Ciantos Group ("we", "our", or "us") is committed to protecting your personal data across our website (ciantos.co.uk) and digital business divisions in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Ciantos Group
Location: London, United Kingdom
Primary Domain: ciantos.co.uk
Privacy Email: [email protected]
2. Personal Data We Collect
We may collect and process the following categories of personal data when you interact with our website:
- Contact & Communication Data: Full name, professional email address, company name, phone number, and message content submitted through our contact forms or email channels.
- Technical & Usage Data: IP address, browser type and version, operating system, time zone setting, referral URLs, page interaction metrics, and system diagnostic telemetry.
- Consent Records: Records of cookie preferences and legal consent selections provided via our cookie management interface.
3. Legal Basis for Processing
We process personal data under the following lawful bases permitted by Article 6 of the UK GDPR:
- Consent: Where you have provided clear consent for specific processing activities (e.g. analytical cookies or newsletter subscriptions).
- Legitimate Interests: Necessary for operating our website, responding to commercial inquiries, maintaining infrastructure security, and improving our digital services.
- Legal Obligation: Necessary to comply with UK regulatory requirements or legal demands.
4. Cookies & Web Analytics
Our website uses essential functional cookies and optional analytical scripts to ensure proper site operation and evaluate performance. Non-essential cookies are only initialized after explicit user consent via our cookie consent banner. You may update or revoke your cookie preferences at any time using the "Cookie Settings" link in the footer.
5. Data Retention & Third-Party Disclosures
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to satisfy statutory obligations. We do not sell or rent personal data. Data may be shared with vetted cloud service providers, hosting infrastructure suppliers, and legal advisors strictly bound by data processing agreements and confidentiality obligations.
6. Your Rights Under UK Data Protection Law
Under the UK GDPR and Data Protection Act 2018, you hold the following rights regarding your personal data:
- Right of Access (request copies of your personal data).
- Right to Rectification (request correction of inaccurate data).
- Right to Erasure / "Right to be Forgotten" (request deletion under applicable criteria).
- Right to Restrict Processing or Object to Processing.
- Right to Data Portability.
To submit a Subject Access Request (SAR) or exercise any right, contact our privacy contact at [email protected].
7. Supervisory Authority & Complaints
If you believe your personal data has been handled improperly, you have the right to lodge a complaint with the UK data protection authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk | Phone: 0303 123 1113