Legal
Privacy notice
Draft — last updated [date].
DRAFT — for UK legal review before publication
This privacy notice is a working draft. It has not been reviewed by a solicitor and must not be relied on. Items in [square brackets] must be completed. Do not publish registration numbers, addresses or certifications until confirmed.
1. Who we are
Core BI (“we”, “us”) is the controller of personal data collected through this website. [Registered company name, company number, registered office address and ICO registration number — to be confirmed.] Contact: info@corebi.uk.
2. What we collect
- Enquiry details you submit: name, work email, company, website, industry, company size, current CRM, description of your operational problem and preferred contact method.
- Technical data needed to operate and protect the site, such as IP address (used transiently for rate limiting and security) and server logs.
- The live demo runs in your browser on synthetic data. Text you type into the demo is not sent to us unless the site operator has enabled the server-side assistant [confirm configuration before publication].
3. Why we use it and our lawful basis
- To respond to your enquiry and arrange a discovery call — legitimate interests in responding to business enquiries, or steps prior to entering a contract.
- To keep the website secure and prevent abuse — legitimate interests.
- We do not use your enquiry for automated decision-making with legal or similarly significant effects.
4. Marketing
We will not send you marketing emails unless you opt in, or where permitted under PECR for corporate subscribers with a clear opt-out. [Confirm approach.]
5. Who we share it with
Service providers acting on our instructions, such as website hosting, email and CRM providers [list providers, e.g. hosting platform, HubSpot, Microsoft 365]. Where data is transferred outside the UK we rely on appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations. [Confirm transfers.]
6. How long we keep it
Enquiries that do not lead to an engagement are deleted after [12] months. Client records are kept for the duration of the relationship and as required by law. [Confirm retention schedule.]
7. Your rights
Under UK GDPR you have rights of access, rectification, erasure, restriction, objection and data portability. To exercise them, contact info@corebi.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).
8. Cookies
This site does not set analytics or advertising cookies by default. If analytics are added, a consent mechanism will be implemented and this section updated. [Confirm before launch.]
9. Client engagements
When we implement workflows for clients we typically act as a processor under a data processing agreement. That agreement, not this notice, governs client data processed in delivery.