Privacy Policy
Last updated: 03/03/2026
1. Introduction
CIS Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store and protect personal data when you use our website, contact us, or engage with our services. Our processing of personal data complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
CIS Ltd is the data controller responsible for your personal data.
Registered address:
Brunel House, Volunteer Way, Faringdon, Oxfordshire, SN7 7HR, United Kingdom.
For any data protection enquiries, please contact:
Email: dpo@cisltd.com
3. Personal Data We Collect
We may collect and process the following types of personal data:
-
Name and contact details (such as email address and telephone number)
-
Company information and job title
-
Information you provide when completing forms on our Website
-
Correspondence when you contact us
-
Technical data such as IP address, browser type and usage data (collected via cookies where consent has been provided)
4. How We Use Your Personal Data
We use personal data for the following purposes:
-
To respond to enquiries and provide requested services
-
To perform contracts entered into with you or your organisation
-
To manage our relationship with clients and prospective clients
-
To send marketing communications where you have given consent
-
To comply with legal and regulatory obligations
-
To improve our website and services
5. Lawful Basis for Processing
We rely on the following lawful bases under UK GDPR:
-
Contractual necessity – where processing is required to perform a contract.
-
Legitimate interests – where processing is necessary for our business operations and does not override your rights.
-
Consent – where required for marketing communications and non-essential cookies.
-
Legal obligation – where we must comply with legal or regulatory requirements.
6. Data Sharing
We may share personal data with:
-
Service providers who support our business operations
-
IT and hosting providers
-
Analytics providers (where consent has been given)
-
Legal, regulatory or law enforcement authorities where required by law
-
Finance or credit assessment partners where contractually necessary
We do not sell personal data to third parties.
7. International Transfers
Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place to protect the data in accordance with UK GDPR requirements.
8. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting or reporting requirements.
Retention periods vary depending on the nature of the data and legal obligations.
9. Your Rights
Under UK data protection law, you have the right to:
-
Request access to your personal data
-
Request correction of inaccurate data
-
Request erasure of your personal data
-
Request restriction of processing
-
Object to processing
-
Withdraw consent where processing is based on consent
To exercise your rights, please contact dpo@cisltd.com.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached.
10. Cookies
Information about how we use cookies and how you can manage your preferences is set out in our Cookie Policy.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The most recent version will always be available on this page.