Privacy Notice
Last updated: 4 October 2026
This notice explains what personal data CleverSkin Technologies Limited collects through this website, why we use it, who may receive it and what rights you have. We aim to collect only what we need for a defined purpose.
Controller
CleverSkin Technologies Limited is the controller for the personal data described in this notice.
- Company number: 16091105
- Registered office: 167 – 169 Great Portland Street, Fifth Floor, London W1W 5PF, United Kingdom
- Privacy contact route: website contact form
What we collect
- Information you submit through the contact form, including your name, email address, organisation, enquiry type and message.
- Technical and security data generated by normal website operation, such as IP address, browser, device, requested URL, time and security logs where the hosting environment records them.
- First-party aggregate event-page counters, including page views and outbound CTA clicks.
- Correspondence and business records created when we continue a discussion with you.
Why we use it
We use personal data to respond to enquiries, manage business relationships, protect the website, prevent abuse, maintain records and meet legal or regulatory obligations. Depending on the context, the lawful basis may be legitimate interests, steps requested before a contract, performance of a contract, legal obligation or consent where consent is specifically required.
Contact-form messages
Messages submitted through the contact form are stored in a restricted WordPress administration inbox so that an enquiry is not lost if email delivery fails. Access is limited to authorised website administrators. We may also send an email notification to an internal destination address.
Anti-spam controls
The contact form uses first-party anti-spam measures including hidden fields, rate limiting and a simple challenge question. These controls are designed to reduce automated abuse without adding third-party advertising or tracking services.
Sharing
We do not sell personal data. Service providers may process data where needed to host, secure, back up or operate the website and business communications. Information may also be disclosed where required by law or necessary to protect legal rights.
International transfers
Where a provider processes personal data outside the UK, an appropriate transfer mechanism should be used where required, such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another lawful mechanism.
Retention
We keep personal data only as long as the purpose requires. Routine website enquiries should normally be reviewed for deletion after 24 months unless an active relationship, legal or regulatory requirement, audit need or dispute justifies longer retention.
Your rights
Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent. Use the contact form and mark the enquiry as a privacy request.
Complaints
You can raise a concern with us first. You also have the right to complain to the UK Information Commissioner’s Office.
Security
We use proportionate technical and organisational controls, including HTTPS, access controls, software maintenance, backups and anti-abuse measures. No internet service is risk-free. Do not use the website to send patient-identifiable information or unnecessary sensitive information.
Changes
We will update this notice when the website, processing activity or legal position changes. The version published here is the current website version.