1. Who we are
Celsa Technologies Ltd ("Celsa", "we", "us") is the controller of the personal information described in this policy. We are registered in England and Wales, with our registered office at 13 Wroughton Terrace, London NW4 4LE, United Kingdom.
For any privacy question or request, email hello@celsatechnologies.co.uk.
This policy covers this website and our client services. Our own products, such as ColdSoup, have their own privacy information on their websites.
2. What we collect
When you contact us
If you email us, call us or send a project brief, we receive the details you choose to give us, such as your name, email address, phone number, company and information about your project. The brief form on our contact page does not send anything itself: it opens your own email app with a message for you to review and send.
When you become a client
We keep contact and billing details, contracts, invoices, correspondence and the project information needed to deliver our work. Where a project involves us handling personal data on your behalf, such as your customers' details, we act as your processor and agree the terms of that processing with you in writing.
When you buy the handbook
We collect your name, email address, delivery address and order details so we can take payment, post your book and handle any returns. Card payments are processed by Stripe, which receives your card details directly; we never see or store your full card number.
When you visit this website
Our hosting provider automatically processes technical information needed to deliver the site and keep it secure, such as your IP address, browser type, the pages requested and the time of the request. We do not use analytics or advertising trackers on this website.
3. How we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Replying to enquiries and preparing proposals | Legitimate interests (responding to people who contact us), or steps before entering a contract |
| Delivering projects, support and care plans | Performance of a contract |
| Taking payment for, posting and handling returns of handbook orders | Performance of a contract |
| Invoicing, accounting and tax records | Legal obligation |
| Running, securing and improving this website | Legitimate interests |
| Occasional updates about our work, if you ask for them | Consent, which you can withdraw at any time |
We do not sell personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.
4. Cookies
This website does not set cookies for analytics, advertising or tracking. Your browser may cache files such as fonts and stylesheets to make pages load faster. Our hosting provider may use strictly necessary security measures to protect the site from abuse, which do not require consent.
Our fonts are loaded from Google Fonts, which means your browser connects to Google's servers and Google receives your IP address. You can read how Google handles this in its privacy policy.
5. Who we share it with
We share personal information only with providers who help us run our business, and only as much as they need:
- Website hosting and security: Cloudflare, which serves this website.
- Card payments: Stripe, which processes payments for handbook orders and invoices.
- Delivery: Royal Mail, which receives your name and delivery address to post your order.
- Email and file storage: our business email and document providers.
- Accounting: our accounting software and our accountants.
- Professional advisers such as lawyers and insurers, where needed.
- Authorities, where the law requires it.
Our providers are bound by contracts that require them to protect your information and use it only on our instructions.
6. International transfers
Some of our providers process data outside the UK. When that happens we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
7. How long we keep it
- Enquiries that don't become projects: up to 24 months after our last contact.
- Client and order records, contracts and invoices: six years after the end of the financial year they relate to, as UK tax law requires.
- Website server logs: kept by our hosting provider for a short period for security, typically no more than a few weeks.
8. Security
We use encrypted connections and access controls on the services we use, and we limit access to personal information to people who need it. No system is perfectly secure, but if a breach affecting your information occurs we will act quickly and tell you and the regulator where the law requires.
9. Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use it, or object to our using it;
- ask for your information in a portable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email hello@celsatechnologies.co.uk. It's free, and we will respond within one month. We may need to confirm your identity first.
10. Complaints
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.
11. Changes to this policy
We will update this policy if the way we handle personal information changes. The date at the top shows when it was last revised.