Privacy Policy

1. Who we are

CSSential.com (“CSSential”, “we”, “us” or “our”) is a digital design and development business. This privacy notice explains how we collect, use, store and protect personal information when you visit our website, contact us, request a quotation, become a customer, apply to work with us or otherwise interact with CSSential.

For the purposes of UK data protection law, CSSential will normally act as the controller of personal data collected for our own business purposes. Where we process personal data only on a customer’s documented instructions as part of a service, we may act as a processor and the relevant customer remains the controller.

2. Personal information we may collect

Depending on how you interact with us, we may collect identity and contact information such as your name, business name, job title, email address, telephone number and postal address; enquiry, quotation, contract and project information; billing and transaction information; correspondence and support records; technical information such as IP address, browser type, device information and basic website usage data; and marketing preferences.

If you send us files, website content, account credentials or other project material, that information may also contain personal data. Please only provide information that is necessary for the relevant project or enquiry.

3. How we collect information

We collect information directly from you when you complete a form, email or call us, request a quotation, enter into a contract, pay an invoice, provide project materials or communicate with our team.

We may also receive limited information from business partners, service providers, publicly available business sources, social networks, analytics or security tools, and from customers where we are providing services on their behalf.

4. Why we use personal information

We use personal information to respond to enquiries; prepare quotations and proposals; provide, manage and support our services; communicate about projects; administer contracts, payments and accounts; maintain website and system security; improve our website and services; keep appropriate business records; comply with legal and regulatory obligations; establish, exercise or defend legal claims; and, where permitted, send relevant business updates or marketing communications.

Our lawful basis will depend on the activity. We may rely on performance of a contract or steps taken before entering into a contract, compliance with a legal obligation, our legitimate interests in operating and improving our business, or your consent where consent is required. Where we rely on consent, you can withdraw it at any time.

5. Sharing personal information

We do not sell personal information. We may share information where reasonably necessary with trusted hosting, cloud, communications, payment, accounting, professional, security, analytics or technical service providers; contractors working on a project; public authorities where required by law; or a buyer, investor or successor in connection with a genuine business reorganisation.

Service providers are expected to use personal information only for the agreed purpose and to apply appropriate confidentiality and security measures.

6. International transfers

Some service providers may process information outside the United Kingdom. Where UK data protection law requires safeguards for an international transfer, we will use an available lawful transfer mechanism and take reasonable steps to assess and protect the information involved.

7. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain business and tax records, resolve disputes, enforce agreements and meet legal obligations.

Retention periods vary according to the type of information, the relationship with you, contractual requirements, legal limitation periods and any regulatory or security need. When information is no longer required, we will delete it, anonymise it or securely dispose of it where reasonably practicable.

8. Security

We use reasonable technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, alteration, disclosure or destruction. No internet service or storage system can be guaranteed to be completely secure, so we also limit access to information to people who reasonably need it for their role.

9. Your data protection rights

Depending on the circumstances, you may have rights to be informed about how your data is used; obtain access to your personal data; correct inaccurate or incomplete data; request erasure; restrict processing; object to certain processing; receive certain data in a portable format; and withdraw consent where processing is based on consent.

Some rights are subject to legal conditions and exemptions. To exercise a right, contact us at hello@cssential.com. We may need information to verify your identity before responding.

You can also raise a concern with the UK Information Commissioner’s Office if you believe your personal data has been handled unlawfully.

10. Cookies, marketing and external links

Our use of cookies and similar technologies is explained in our Cookie Policy. Where non-essential technologies require consent, they should not be activated until you have made a valid choice.

If you receive marketing from us, you can unsubscribe or object at any time using the option provided in the message or by contacting us. Our website may link to third-party websites; their privacy practices are controlled by those third parties, not CSSential.

11. Changes to this notice

We may update this privacy notice when our services, technology or legal obligations change. The latest version will be published on this page with an updated date.