Privacy notice

1. Who we are

This website is operated by Caelennia Technologies Ltd (“we”, “us” or “our”), a company registered in England and Wales with company number 17559804. Our registered office is at 128 City Road, London, EC1V 2NX, United Kingdom.

We are the controller of the personal data described in this notice. If you have any questions about this notice or about how we handle personal data, please email privacy@caelennia.com.

2. What this notice covers

This notice covers personal data that we collect when you:

• visit this website;
• contact us by email, telephone or post; or
• deal with us on behalf of an organisation, for example as a supplier or business partner.

Our products have their own privacy notices. If you use one of our products, its privacy notice explains how that product uses your personal data.

3. Personal data we collect

When you visit this website

This website does not use cookies for analytics or advertising, and it does not ask you to create an account or complete a form. When you visit, our hosting and security provider, Cloudflare, processes the technical information that every request to a website contains: your IP address, the date and time of the request, the page requested, your browser and device type, and the address of the page that linked to ours. This information is needed to deliver the website to you and to protect it against attacks and misuse.

We also use Cloudflare Web Analytics to count visits and to see which pages are viewed. This service does not use cookies or local storage, and it does not use your IP address or other information to recognise individual visitors. It records the address of the page viewed, without any query string, the address of the page that linked to it, your browser, operating system and device type, your country and measurements of how quickly the page loaded.

When you contact us

If you email, telephone or write to us, we collect your name, your contact details, the content of your message and any other information that you choose to give us.

When you deal with us on behalf of an organisation

If you work for an organisation that we do business with, we collect your name, job title, business contact details and records of our communications with you.

4. How we use personal data

UK data protection law requires us to have a lawful basis for each use of personal data. The table below sets out each purpose and the lawful basis that we rely on.

We do not sell personal data, we do not use it for advertising and we do not make decisions about you based solely on automated processing.

5. Who we share personal data with

We share personal data only where necessary, with:

• Cloudflare, Inc., which hosts this website, delivers it to visitors, protects it against attacks and provides visit statistics;
• our email service provider, which stores and delivers our email;
• professional advisers, such as accountants and lawyers, where we need their advice; and
• public authorities, courts and regulators, where the law requires us to share information.

Our service providers process personal data only on our instructions and must keep it secure.

6. International transfers

Some of our service providers process personal data outside the UK, for example in the United States. When this happens, we make sure that the data remains protected. We rely on UK adequacy regulations, such as the UK Extension to the EU-US Data Privacy Framework for certified US organisations, or on the International Data Transfer Agreement or the International Data Transfer Addendum issued under UK law. You can ask us for more information about these safeguards.

7. How long we keep personal data

• Technical request data: processed by Cloudflare under its own retention policy for security and operational purposes. We do not keep our own logs of visits to this website.
• Website usage data: kept by Cloudflare for its Web Analytics service. Cloudflare keeps the full data for seven days; after that, it keeps a reduced sample of about 10%.
• Enquiries: up to two years after our last contact with you, unless the enquiry leads to a business relationship.
• Business records: six years from the end of the financial year to which they relate, as UK company and tax rules require.

When we no longer need personal data, we delete it or anonymise it.

8. How we protect personal data

We use appropriate technical and organisational measures to protect personal data. These include encrypting data in transit, limiting access to the people who need it for their work and keeping our systems up to date.

9. Your rights

Under UK data protection law, you have the right to:

• ask for a copy of your personal data;
• ask us to correct personal data that is inaccurate or incomplete;
• ask us to delete your personal data;
• ask us to restrict how we use your personal data; and
• receive certain personal data in a portable format, where this right applies.

To exercise any of these rights, email privacy@caelennia.com. We may need to confirm your identity before we respond. We will respond without undue delay and within one month. If a request is complex, the law allows up to two further months; in that case, we will tell you within the first month and explain why.

10. How to complain

If you are unhappy with how we have handled your personal data, please contact us first at privacy@caelennia.com. We will acknowledge your complaint within 30 days, investigate it and tell you the outcome without undue delay.

You also have the right to complain to the UK data protection regulator, the Information Commission (ICO):

• Website: ico.org.uk/make-a-complaint
• Telephone: 0303 123 1113

11. Changes to this notice

We may update this notice from time to time. The date at the top of this page shows when it was last changed.