This policy explains how CXaaS Consulting Ltd ("CXaiS", "we", "us") handles personal data when you visit our websites, read our Insight Papers, subscribe to our newsletter, or contact us. We are the data controller for the personal data described here.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
CXaaS Consulting Ltd, trading as CXaiS
Company number: 15149940
Registered address: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom
Privacy contact: privacy@cxais.ai
2. The personal data we collect
Depending on how you interact with us, we may collect:
| Newsletter data | Your email address, and any name you provide, when you subscribe. Our newsletter is delivered through HubSpot. |
| Enquiry data | Your name, email address, organisation, role, and the contents of any message when you contact us or request a readiness read. |
| Usage data | Technical information collected automatically through cookies and similar technologies, such as IP address, browser type, pages visited, and referring source. |
| Engagement data | Where you engage with us as a client or prospect, records of our correspondence and the services discussed, held in our CRM (HubSpot). |
3. How we use it, and our lawful basis
Under UK GDPR we must have a lawful basis for each use of your data. Ours are:
| To send you our newsletter | Consent. You may withdraw it at any time using the unsubscribe link in any email. |
| To respond to enquiries and provide our services | Contract, or legitimate interests in responding to and pursuing business enquiries. |
| To understand and improve how our sites are used | Consent for non-essential cookies; legitimate interests for essential site operation. |
| To meet legal and accounting obligations | Legal obligation. |
4. Cookies
Our websites use cookies to operate correctly and, with your consent, to measure how they are used. You can accept or decline non-essential cookies through the banner shown on your first visit, and change your choice at any time through your browser settings. Essential cookies needed for the site to function do not require consent.
5. Who we share data with
We do not sell your personal data. We share it only with the service providers who help us run our business, each acting as our processor under contract:
• HubSpot for our website hosting, forms, CRM, and newsletter delivery.
• Wix for our main website and media hosting.
• Google for analytics and workplace tools.
Some of these providers are based outside the UK. Where data is transferred internationally, we rely on the UK's adequacy regulations or on standard contractual clauses (the International Data Transfer Agreement or UK Addendum) to protect it.
6. How long we keep it
We keep personal data only as long as we need it for the purpose it was collected, or as long as the law requires. Newsletter data is kept until you unsubscribe. Enquiry and client records are kept for the duration of our relationship and for a reasonable period afterwards to meet legal, accounting, and legitimate business needs.
7. Your rights
Under UK GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent where we rely on it. To exercise any of these, contact us at privacy@cxais.ai. We will respond within one month.
8. Complaints
If you have a concern about how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.
9. Changes to this policy
We may update this policy from time to time. The effective date at the top shows when it last changed. Material changes will be made clear on this page.
Questions about this policy? Contact privacy@cxais.ai.