Privacy Policy

How Cloud Smart Solutions Ltd collects, uses, and protects your personal information.

Last updated: June 2025

Introduction

Cloud Smart Solutions Ltd ("we", "us", or "our") is committed to protecting your privacy and ensuring your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This privacy policy explains what personal data we collect, how we use it, how long we keep it, and your rights regarding your data.

Who We Are

Cloud Smart Solutions Ltd is a managed IT services and cyber security company registered in England and Wales. We are the data controller for the personal data described in this policy.

  • Company: Cloud Smart Solutions Ltd
  • Address: Pattisson House, Addison Road, Chesham, HP5 2BD
  • Email: support@cloudss.co.uk

What Data We Collect

We collect personal data in the following ways:

Contact Forms

When you submit our contact form, we collect your first name, last name, email address, phone number (optional), and your message. This information is used solely to respond to your enquiry and to provide you with the services you have requested.

Cyber Essentials Assessment Forms

If you engage with our Cyber Essentials assessment services, we may collect additional business and technical information necessary to complete your certification. This data is processed as part of our contractual obligations to you.

Website Usage

We do not use analytics tracking cookies on this website. We do not track your browsing behaviour across other websites.

Cookies and reCAPTCHA

This website uses Google reCAPTCHA v3 on our contact and assessment forms to protect against spam and abuse. Google reCAPTCHA may set cookies and collect data such as your IP address, browser type, and interaction patterns to determine whether you are a human user.

Google's use of this data is governed by their Privacy Policy and Terms of Service.

How We Use Your Data

We use the personal data we collect for the following purposes:

  • To respond to your enquiries submitted through our contact form
  • To provide managed IT support and cyber security services you have engaged us for
  • To process Cyber Essentials assessments and certifications
  • To communicate important information about our services
  • To comply with legal and regulatory obligations

We process your data on the basis of legitimate interest (responding to enquiries), contractual necessity (delivering services you have engaged), and legal obligation (regulatory compliance) as applicable.

Data Storage and Retention

Your personal data is stored securely and access is restricted to authorised personnel only. We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction.

We retain your data for the following periods:

  • Contact form submissions: Retained for up to 12 months after your last interaction with us, unless an ongoing service relationship exists
  • Client service data: Retained for the duration of our contract and up to 6 years afterwards to comply with legal and regulatory requirements
  • Cyber Essentials assessment data: Retained in accordance with the certification body's requirements, typically for the duration of the certification period

Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data with:

  • Certification bodies: When processing Cyber Essentials assessments, relevant data is shared with the certification body as required
  • Service providers: We may use third-party tools (such as email services) to deliver our services, all of whom are bound by data processing agreements
  • Legal authorities: Where required by law or regulation

Your Rights Under GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of Access: You have the right to request a copy of the personal data we hold about you
  • Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data
  • Right to Erasure: You have the right to request that we delete your personal data, subject to any legal obligations we may have to retain it
  • Right to Restrict Processing: You have the right to request that we limit how we use your data
  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format
  • Right to Object: You have the right to object to our processing of your personal data where we rely on legitimate interest

To exercise any of these rights, please contact us at support@cloudss.co.uk. We will respond to your request within 30 days.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us: