Privacy Policy

This Privacy Policy explains how Content General Services Ltd (“we”, “us”, “our”) collects and uses personal data when you visit this website, enquire about our services or work with us as a client or supplier. We are the data controller for that information.

1. Who we are

Content General Services Ltd is a company operating from 48 Charlotte Road, Shoreditch, London EC2A 3PD, United Kingdom. For any question about this policy or about how we handle personal data, contact us at [email protected] or +44 20 7946 0184.

2. The personal data we collect

• Enquiry data — the name, organisation, email address, telephone number and message you submit through our contact form or send us directly by email.
• Client and supplier data — contact details of the individuals we work with, billing details, and correspondence relating to a project.
• Technical data — IP address, browser type and version, device type, operating system, referring page and the pages you view, collected through server logs and (with your consent) analytics cookies.
• Consent data — a record of the cookie preference you set on this website, stored in your browser.

We do not knowingly collect special category data and we ask that you do not send it through the enquiry form. This website is not directed at children under 13.

3. How we use it and our lawful bases

Purpose	Lawful basis (UK GDPR)	Retention
Responding to your enquiry and preparing a proposal	Legitimate interests — to respond to a request you made to us	24 months from last contact
Delivering services under a contract	Performance of a contract	Duration of engagement + 6 years
Invoicing, accounting and tax records	Legal obligation	6 years after the end of the tax year
Site security, fraud prevention and abuse monitoring	Legitimate interests	12 months (server logs)
Analytics and site improvement	Consent	Up to 14 months
Occasional service updates to existing clients	Legitimate interests, with an opt-out in every message	Until you object

4. Sharing your information

We do not sell personal data. We share it only with the processors that allow us to operate: our website host, our email and productivity provider, our accounting software and, where you have consented, our analytics provider. Each is bound by a written data processing agreement. We may also disclose information where we are required to do so by law, by a regulator or by a court.

5. International transfers

Our suppliers are located in the United Kingdom and the European Economic Area wherever possible. If personal data is transferred outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses), together with appropriate technical safeguards.

6. Security

We apply access controls, encryption in transit, multi-factor authentication on business systems, device encryption, and a least-privilege approach to project files. No transmission over the internet can be guaranteed to be fully secure, so please avoid sending confidential material through the website form.

7. Your rights

Under the UK GDPR you have the right to be informed; the right of access; the right to rectification; the right to erasure; the right to restrict processing; the right to data portability; the right to object to processing based on legitimate interests or direct marketing; and rights relating to automated decision-making. We do not carry out automated decision-making or profiling that produces legal effects.

To exercise any right, email [email protected]. We will respond within one calendar month. There is no charge unless a request is manifestly unfounded or excessive.

8. Complaints

If you are unhappy with how we have handled your personal data, please contact us first so that we can put it right. You also have the right to complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, ico.org.uk.

9. Changes to this policy

We review this policy at least annually and whenever our processing changes materially. The version in force is the one published on this page, and the date of the last revision is shown above.