Privacy Policy

This Privacy Policy explains how Credenta Limited collects, uses, and protects your personal data. We are committed to handling your information responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Credenta Limited is the data controller responsible for your personal data.

Company name: Credenta Limited
Company number: 16461079
Registered jurisdiction: England & Wales
Website: www.credentaltd.com
Contact email: info@credentaltd.com

If you have any questions about how we handle your personal data, please contact us using the details above.

2. Personal Data We Collect

We may collect the following categories of personal data:

Information you provide directly

Full name
Email address
Phone number
Company or organisation name
Service enquiry details and messages
Any other information you choose to share with us

Information collected automatically

IP address and approximate location
Browser type and version
Pages visited and time spent on our website
Referring website or source
Device type and operating system

3. How We Use Your Data

We use your personal data for the following purposes:

Purpose	Description
Responding to enquiries	To reply to messages submitted via our contact form or email
Service delivery	To provide consultancy and professional services you have engaged us for
Business communications	To send relevant information about our services where you have consented
Website improvement	To understand how our website is used and improve user experience
Legal compliance	To meet our legal and regulatory obligations
Record keeping	To maintain accurate business records as required by law

4. Legal Basis for Processing

We process your personal data under the following lawful bases as defined by UK GDPR Article 6:

Legitimate interests — to respond to enquiries, manage client relationships, and improve our services
Consent — where you have explicitly agreed to us processing your data (e.g. contact form submissions)
Contract — where processing is necessary to perform a contract with you or take pre-contractual steps
Legal obligation — where we are required to process data to comply with applicable law

We do not sell, rent, or trade your personal data. We may share your data in the following limited circumstances:

Service providers: Third-party suppliers who help us operate our website or deliver services (e.g. hosting providers, email platforms), who are contractually bound to protect your data
Legal requirements: Where we are required to disclose data by law, court order, or regulatory authority
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction

All third parties are required to handle your data securely and in accordance with applicable data protection law.

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

Enquiry data — retained for up to 24 months from the date of last contact
Client data — retained for the duration of the engagement plus up to 6 years, in accordance with legal and contractual obligations
Website analytics — typically retained for up to 14 months

After these periods, data is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate or incomplete data
Right to erasure — to request deletion of your data in certain circumstances
Right to restriction — to request that we limit how we use your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@credentaltd.com. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website may use cookies and similar tracking technologies to improve your browsing experience and help us understand how the site is used.

Types of cookies we may use

Essential cookies — necessary for the website to function correctly
Analytics cookies — to understand visitor behaviour and improve our website (e.g. Google Analytics)
Preference cookies — to remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality. Where required by law, we will seek your consent before setting non-essential cookies.

9. Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encrypted data transmission (HTTPS/TLS)
Access controls and authentication measures
Regular review of our data handling practices
Staff awareness of data protection obligations

While we take reasonable precautions, no method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please contact us:

Email: info@credentaltd.com
Website: credentaltd.com/contact
Post: Credenta Limited, Registered in England & Wales, Company No. 16461079

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues, at ico.org.uk/concerns or by calling 0303 123 1113.