Privacy Policy
How COLLINS CROSS LTD collects, uses, shares and protects personal information, and the rights you have over it.
1. Who we are
COLLINS CROSS LTD (“Collins Cross”, “we”, “us” or “our”) is the controller of the personal information described in this privacy policy.
We are a private limited company registered in England and Wales under company number 10080074. Our registered office is:
Office 734058 Peregrine Road
Ilford
Essex
IG6 3SZ
United Kingdom
Our VAT registration number is 301753339.
If you have a question about this policy, wish to exercise a data protection right or want to make a complaint about how we use your information, please get in touch using the contact form on this website.
2. Information we collect
Information you provide
When you contact us or submit an enquiry through our website, we may collect:
- your name;
- your business email address;
- your company or organisation;
- your project or service requirements;
- the contents of your message;
- any other information you choose to provide.
If you become a client, supplier or business contact, we may also collect information necessary to manage the relationship, including your role, contact details, correspondence, contractual information, invoicing details and records relating to the services provided.
Please do not include sensitive personal information, confidential business information or information about another person in an initial enquiry unless it is necessary and you are authorised to provide it.
Information collected when you use the website
Our website and hosting provider may automatically process limited technical information, such as:
- your IP address;
- browser and device type;
- operating system;
- pages visited;
- date and time of access;
- referring website;
- security and server-log information.
We use this information to operate, protect and maintain the website and, where applicable, to understand how it is used.
3. How and why we use your information
We use personal information only where we have a lawful basis under UK data protection law.
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and discussing requested services | Our legitimate interests in responding to business enquiries and developing our business. Where you are contracting with us personally, processing may also be necessary to take steps at your request before entering into a contract. |
| Preparing, entering into and performing an agreement | Performance of a contract with you, or our legitimate interests in managing an agreement with the company or organisation you represent. |
| Managing client, supplier and professional relationships | Our legitimate interests in operating and administering our business. |
| Maintaining financial, tax and business records | Compliance with our legal obligations and our legitimate interests in maintaining accurate business records. |
| Establishing, exercising or defending legal rights | Our legitimate interests in protecting our business and legal position. |
| Operating, securing and improving the website | Our legitimate interests in maintaining a secure, reliable and effective website. |
| Using non-essential cookies or analytics where consent is required | Your consent. You may withdraw that consent at any time through the website’s cookie controls. |
Where we rely on legitimate interests, we consider whether our interests are necessary and proportionate and whether they are overridden by your rights and interests.
We do not sell personal information. We do not use contact-form information for unrelated third-party marketing.
4. If you do not provide the requested information
Fields marked as required on our contact form are needed so that we can receive and respond to your enquiry. If you do not provide that information, we may be unable to respond or provide the requested services.
Other information is optional unless we explain otherwise.
5. Who we share information with
We may share personal information, where necessary, with:
- our website hosting and technical-service providers;
- our email, cloud-storage and customer-management providers;
- professional advisers, including accountants, legal advisers and insurers;
- contractors or service providers supporting an engagement;
- government bodies, regulators, law-enforcement authorities or courts where disclosure is required or permitted by law;
- a potential buyer, investor or successor if our business or assets are reorganised, transferred or sold.
These recipients may act as processors on our behalf or as separate controllers, depending on the circumstances.
We require service providers acting on our behalf to protect personal information and use it only for the agreed purpose. We do not share personal information with third parties for their own marketing purposes.
6. International transfers
Some service providers may process personal information outside the United Kingdom.
Where personal information is transferred to a country that is not covered by UK adequacy regulations, we will use an appropriate legal safeguard where required. This may include the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another safeguard permitted by UK data protection law.
You may contact us if you would like more information about the safeguards applying to a particular transfer.
7. How long we keep information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting and reporting requirements.
Our usual retention periods are:
- Enquiries that do not result in an engagement: up to 12 months after our last meaningful contact.
- Client and engagement records: normally six years after the engagement or business relationship ends.
- Financial, invoicing and tax records: normally six years from the end of the financial year to which they relate, or longer where required by law.
- Cookie and analytics information: for the periods shown in our cookie notice or cookie-preference tool.
We may retain information for longer where this is necessary to comply with a legal obligation, resolve a dispute or establish, exercise or defend a legal claim. We may delete or anonymise information earlier when it is no longer required.
8. How we protect information
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.
Access is restricted to people and service providers who need the information for legitimate business purposes and who are subject to appropriate confidentiality obligations.
No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.
9. Your data protection rights
Depending on the circumstances, you may have the right to:
- ask for access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your information;
- ask us to restrict how we use your information;
- object to processing based on legitimate interests;
- receive certain information in a portable format;
- withdraw consent at any time where processing is based on consent;
- complain about how we use your information.
These rights are not absolute and exemptions may apply.
To exercise a right, get in touch using the contact form on this website. We may request information reasonably necessary to confirm your identity.
We will normally respond within one month after receiving a valid request or, where necessary, after confirming your identity. In certain circumstances the law allows us to extend the response period, in which case we will explain why.
You have the right to object to our processing where we rely on legitimate interests. If personal information is ever used for direct marketing, you may object to that use at any time.
10. Automated decision-making
We do not use personal information collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.
11. Data protection complaints
You can make a complaint about how we collect or use your personal information using the contact form on this website.
We will:
- acknowledge a data protection complaint within 30 days;
- take appropriate steps to investigate it;
- keep you informed where appropriate;
- communicate the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office (“ICO”), the UK supervisory authority: Make a complaint to the ICO.
We would appreciate the opportunity to address your concerns first, but you are not required to contact us before approaching the ICO.
12. Links to other websites
Our website may contain links to websites operated by other organisations. We are not responsible for their privacy practices. You should read the privacy information provided by those organisations before submitting personal information to them.
13. Changes to this policy
We may update this policy to reflect changes to our services, systems or legal obligations. The latest version will be published on this page with an updated revision date.
If a material change affects an existing client or changes how we use information already collected, we will provide an appropriate notice where required.
Last updated: 25 August 2026