Privacy Policy
Effective date: 1 January 2026
Calmfieldcross Ltd is committed to protecting your personal data and privacy. This policy explains how we collect, use, disclose and safeguard personal information when you visit our website, request a diagnostic, submit a contact form, or engage our advisory services. We are a company registered in the United Kingdom with an office at 12 Cornhill, London, EC3V 3ND. Our primary contact for data protection matters is [email protected]. This Privacy Policy applies to our website and to our pre-engagement and client communications. We process personal data necessary to provide services, to evaluate proposals, to communicate with you and to comply with legal obligations. We only collect data that is relevant and proportionate to those purposes and take reasonable steps to keep it accurate and secure.
Information we collect
We collect personal information you provide directly to us and information collected automatically when you use our site. Information you provide directly may include your name, job title, company, email address, telephone number, and any details you include in messages or attachments. When you request a diagnostic or proposal we may ask for additional information about your organisation, financial metrics, and project scope to prepare a governance-ready output. Automatically collected information may include IP addresses, browser type, pages visited, time spent, and referral source. We use cookies and analytics to improve site performance and to help us understand visitor behaviour. We only collect special categories of data with your explicit consent and otherwise avoid collecting sensitive personal data. We retain information only as long as necessary for the purposes described and in compliance with applicable law.
How we use personal information and legal bases
We use personal information to communicate with you, evaluate and deliver advisory services, prepare diagnostics and proposals, and to maintain client records. We may use contact details to arrange calls, send reports, invoices, and to provide client support. Our lawful bases for processing include performance of a contract, legitimate interests such as service improvement and fraud prevention, and where applicable your consent. When you opt in to marketing materials we rely on your consent and provide a simple way to opt out. We will not use information for purposes incompatible with those described here without notifying you and, where required, obtaining your consent. We may combine data from multiple sources to deliver a more relevant engagement experience and to improve governance-ready outputs for boards and management teams.
Cookies and tracking technologies
We use cookies and similar technologies to provide core site functionality, remember preferences, and analyse site usage to improve the experience. Essential cookies enable the site and forms to function. Non-essential cookies help with analytics and performance. The cookie modal on our site allows you to accept or reject non-essential cookies. You can also control cookies via your browser settings. We do not place non-essential cookies without your consent. Where we use third-party analytics, those providers may set cookies to provide aggregated usage reports. We take steps to anonymise data where possible and limit access to raw analytics. For details on the types of cookies in use, please review the cookie modal or contact [email protected].
Sharing and disclosure
We do not sell personal information. We may share personal data with trusted third parties who provide services on our behalf, such as cloud hosting, analytics, and secure document exchange. Those providers are contractually bound to protect data and only use it for the contracted purpose. We may disclose personal information where required by law, to respond to legal process, to protect rights or property, or to prevent fraud. When a transaction involves the sale or transfer of our business, personal information may be among the transferred assets but will remain subject to this policy or the acquiring party's privacy policy if you are notified. We require recipients to apply appropriate safeguards and to process data consistent with applicable law and this policy.
Data retention and security
We retain personal information for as long as necessary to fulfil the purposes described and to meet legal, accounting, or reporting requirements. Retention periods depend on the nature of the information and the relationship with you. We apply industry standard administrative, technical and physical safeguards to protect personal data against unauthorised access, disclosure, loss or destruction. Access to personal information is limited to employees and service providers who need it to perform their job. Where we transfer data internationally, we rely on lawful transfer mechanisms such as standard contractual clauses and only transfer to countries with appropriate protections in place. No method of transmission over the internet or electronic storage is completely secure. We review and update our practices regularly to maintain appropriate security levels.
Your rights and choices
Subject to applicable law you may have rights in relation to your personal data, including the right to access, correct, restrict or delete your personal information, to object to processing, and to portability where applicable. You may withdraw consent at any time for processing based solely on consent. To exercise your rights, contact us at [email protected] or by mail to Calmfieldcross Ltd, 12 Cornhill, London, EC3V 3ND. We will respond to verified requests in accordance with applicable law. If you remain dissatisfied after contacting us, you have the right to lodge a complaint with the UK Information Commissioner's Office or other relevant supervisory authority in your jurisdiction.
Changes to this policy and contact
We may update this Privacy Policy to reflect changes in our practices or legal requirements. When material changes are made we will post the updated policy with a revised effective date. For questions about this policy or to make a request regarding personal data, please email [email protected] or call +44 20 7946 0958. You may also write to Calmfieldcross Ltd, 12 Cornhill, London, EC3V 3ND, United Kingdom. For terms governing use of the site and services see our Terms of Service.