Legal
Privacy Policy
How Conciptual Ltd collects, uses and protects your personal data in compliance with UK GDPR.
Who we are
Conciptual Ltd is a company registered in England and Wales at Companies House under company number 11338306. Our registered office is in London, United Kingdom. We operate a second branch in Constanța, Romania. When we refer to "we", "us" or "our" in this policy, we mean Conciptual Ltd.
You can contact us at office@conciptual.co.uk or by phone at +40 791 595 545.
What data we collect
We may collect the following personal data when you use our website or contact us:
- Contact form submissions — your name, email address, company name and the content of your message.
- Email correspondence — any information you include when you email us directly.
- Server logs — your IP address, browser type, pages visited and timestamps, collected automatically by our hosting provider.
- Cookies — see our Cookie Policy for details.
How we use your data
We use the data we collect to:
- Respond to your enquiries and provide the services you have requested.
- Send project-related communications where you are an existing client.
- Improve our website and services based on usage patterns.
- Comply with our legal obligations.
We do not sell, rent or share your personal data with third parties for marketing purposes.
Legal basis for processing
We process your personal data on the following legal bases under UK GDPR:
- Consent — where you have explicitly opted in (for example, by ticking an opt-in box on a form).
- Contract performance — where processing is necessary to deliver services you have engaged us for.
- Legitimate interests — where processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights.
- Legal obligation — where we are required by UK law to retain records (such as financial transactions).
Data retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact enquiries that do not result in an engagement are deleted after 12 months. Client and financial records are retained for six years in compliance with UK tax law (HMRC).
Your rights under UK GDPR
Under UK data protection law, you have the following rights regarding your personal data:
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can ask us to correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten") — you can request the deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restriction — you can ask us to suspend processing your data in certain circumstances.
- Right to data portability — you can request the transfer of your data to another organization.
- Right to object — you can object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, email us at office@conciptual.co.uk. We will respond within 30 calendar days.
Third-party services
We use the following third-party services to deliver our website and communications:
- Cloudflare — CDN, DNS, and DDoS protection (security and edge routing).
- Hetzner / AWS — cloud hosting infrastructure.
All third-party providers are assessed for UK GDPR adequacy and process data only under written data processing agreements.
Complaints
If you are unhappy with how we have handled your personal data, please contact us first so we can resolve the issue. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
Related legal policies
Please also consult our related policies: