Privacy Notice
1. Who we are
This privacy notice explains how Com:position collects and uses your personal data when you use our website https://www.cposition.com/ (the “Site”).
Privacy notice
We are the data controller for personal data processed in connection with your use of the Site.
Legal name: Composition Creative Consultancy Ltd
Registered address: New Barn - Hill Farm, May Street, Royston, Cambridgeshire, United Kingdom, SG8 8SN
Contact email: info@cposition.com
If you have any questions about this notice or how we use your data, you can contact us using the details above.
2. The personal data we collect
We may collect and process the following categories of personal data when you use the Site.
Privacy notice
Contact details
Your name, email address, phone number and any other details you provide when you complete forms or contact us.
Account details (if applicable)
Username, password and profile information if you create an account on the Site.
Communications
Records of messages, enquiries or feedback you send us.
Technical data
Limited technical information sent by your browser or device such as IP address, browser type, operating system, pages requested and the date and time of your request. This data is generated as part of normal internet communications and not through cookies or similar tracking technologies.
Marketing preferences
Your choices about receiving marketing communications from us.
We do not intentionally collect special category data (such as health information) through the Site, and we ask you not to provide this via our forms.
3. How we use your personal data and our legal bases
We only use your personal data when we have a lawful basis under UK data protection law.
We may use your personal data for the following purposes:
To operate and secure the Site
We use technical data such as IP address and basic device or browser log information to maintain the security and functionality of the Site.
Legal basis: legitimate interests (to provide and secure our online services).
To respond to enquiries and provide customer support
We use contact details and communications to respond to messages, enquiries or requests.
Legal basis: legitimate interests (to manage enquiries) or performance of a contract where the enquiry relates to a contract with you.
To manage user accounts (if applicable)
If accounts are available on the Site, we use account and login information to manage access and functionality.
Legal basis: performance of a contract with you.
To send marketing communications
We may use your contact details and marketing preferences to send information about our services.
Legal basis: consent where required, or legitimate interests for similar products or services. You can opt out at any time.
To improve and develop the Site and our services (without cookies)
We may analyse aggregated, non-cookie technical or usage information and feedback to understand how the Site is used and improve our services.
Legal basis: legitimate interests.
To comply with legal obligations
We may process relevant personal data to comply with legal or regulatory requirements.
Legal basis: compliance with a legal obligation.
If we rely on legitimate interests, we balance our interests against your rights and expectations and only process data where our interests are not overridden.
Where we rely on consent, you can withdraw it at any time by contacting us or using the unsubscribe options in our messages.
4. Who we share your personal data with
We may share your personal data with:
Privacy notice
Service providers who help us operate the Site and deliver our services (for example hosting providers, email and CRM services, and website developers).
Professional advisers such as lawyers, auditors and insurers.
Authorities, regulators, law enforcement or courts where we are required to do so by law or to protect our rights.
We require all service providers to keep your data secure and to use it only in accordance with our instructions and applicable data protection law.
5. International transfers
Some of our service providers or partners may be located outside the UK and may process your personal data in countries that do not provide the same level of data protection as the UK.
Privacy notice
When we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:
adequacy regulations made by the UK government; or
approved standard contractual clauses or other contractual safeguards.
You can contact us for more information about these safeguards or to obtain a copy of them.
6. How long we keep your personal data
We keep your personal data only for as long as needed for the purposes described in this notice, including to meet legal, accounting or reporting requirements.
Privacy notice
In general (and subject to your rights):
enquiry data is usually kept for up to 12–24 months after we respond;
account data (if applicable) is kept while your account is active and for a reasonable period afterwards (for example 6–7 years) to handle queries or legal claims;
marketing data is kept until you opt out or after a period of inactivity, unless we need to retain it longer for recordkeeping.
If we cannot specify an exact period, we use criteria such as the nature of our relationship with you, the type of data and our legal obligations to determine the appropriate retention period.
7. Your rights
Under UK data protection law, you have certain rights regarding your personal data.
Privacy notice
These may include:
Right of access – to obtain a copy of your personal data and information about how we use it.
Right to rectification – to correct inaccurate or incomplete data.
Right to erasure – to ask us to delete your data in certain circumstances.
Right to restriction – to ask us to restrict the use of your data in certain circumstances.
Right to data portability – to receive certain data in a structured, commonly used and machine-readable format and request that we transfer it to another organisation.
Right to object – to object to processing based on legitimate interests and to direct marketing.
Right to withdraw consent – where processing relies on consent.
You can exercise your rights by contacting us using the details in section 1.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.
ICO website: https://ico.org.uk
ICO helpline: 0303 123 1113
ICO address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
8. Whether you have to provide personal data
In some cases, you may need to provide certain personal data (for example basic contact details) so we can respond to an enquiry or enter into a contract with you. If you choose not to provide this information, we may not be able to provide the requested service or respond fully to your enquiry.
Where providing data is optional, we will make this clear.
9. Automated decision-making
We do not carry out decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects for you via this Site. If this changes, we will update this notice and explain the logic involved and the potential consequences for you.
10. Changes to this privacy notice
We may update this privacy notice from time to time, for example if our processing changes or to reflect new legal requirements. We will post any updates on this page and, where appropriate, notify you by email or through the Site.
This notice was last updated: February 2026.