About
Web design Optimisation Automation
Support

Privacy policy

Last updated: July 2026

This Privacy Policy explains how C3PO Consulting ("we", "us", "our") collects, uses, and protects your personal information when you visit our website www.c3po.me.uk or use our services.

We are the "data controller" for the personal information described in this policy. If you have any questions, contact us at [email protected].

1. Information We Collect

We may collect the following types of information:

  • Contact details you provide directly (e.g., name, email address, phone number) when you fill in an enquiry form, request a quote, or sign up for our services
  • Account information, if you have an active account for a support package or SaaS subscription (e.g., login details, billing information)
  • Payment information, processed securely via our payment provider(s), including Stripe — we don't store full card details ourselves
  • Technical information, such as your IP address, browser type, device information, and pages visited, collected automatically via cookies and similar technologies
  • Communications, such as emails or messages you send us

2. How We Use Your Information

We use your information to:

  • Respond to enquiries and provide quotes
  • Deliver web design, optimisation, support, and SaaS services you've purchased
  • Manage your account and process payments
  • Send service-related communications (e.g., invoices, project updates)
  • Send marketing communications, but only where you've opted in or as otherwise permitted by law (you can unsubscribe at any time)
  • Improve our website and services, including through analytics
  • Comply with legal obligations (e.g., tax and accounting records)

3. Legal Basis for Processing Your Data

Depending on the purpose, we rely on one or more of the following legal bases:

  • Contract — to provide services you've requested or purchased
  • Consent — for optional marketing communications and non-essential cookies (via our cookie consent tool)
  • Legitimate interests — for things like improving our website, preventing fraud, and basic business administration, where this doesn't override your rights
  • Legal obligation — to meet accounting, tax, or other regulatory requirements

4. Your Rights As A “Data Subject”

Under data protection law you retain the following rights over your personal data:

  • the right to access the data we hold about you;
  • the right to correction/rectification of any data that is inaccurate or incomplete;
  • the right to deletion of your data (also known as “the right to be forgotten”);
  • the right to restrict processing of your data;
  • the right to data portability;
  • the right to object to the processing of your data; and
  • rights in relation to automated decision making and profiling.

In general, we will provide information in response to your requests without charge, unless the requests are unfounded, excessive, or repetitive. In those cases, we may elect to refuse your request in the absence of payment of a reasonable fee.

If you exercise your right to be forgotten, this would result in a termination of your relationship with C3PO Consulting.

4.1. Privacy Rights (GDPR)

If you are a resident of one of the EU countries or other covered nations and the processing of personal information about you by our website is subject to the GDPR, you have certain rights with respect to that information, in all cases subject to applicable law.

This section applies only if you are an EU resident and we (1) are established in the EU and a data controller or processor; (2) are processing personal data of data subjects who are in the EU, where the processing activities are related to: (a) the offering of goods or services, paid or free, to consumers in the EU; or (b) the monitoring of behavior that takes place within the EU. (GDPR or analogous rights and obligations also apply to persons in the EEA, UK, or Switzerland).

Your rights as a "data subject" are the same as in section 4 above, unless otherwise stated. Our obligations are detailed below in section 5.

Please make any of your requests under EU law, as applicable, by contacting us via email at: [email protected].

5. Our Obligations

We have the following related obligations, subject to applicable law:

  • To process data lawfully, fairly and in a transparent manner
  • To process data in connection with limited purpose for which it was provided
  • To minimise the data collected in relation to the purpose of its processing
  • To keep data accurate and up to date
  • To limit storage of data when no longer needed
  • To keep data secure and protected against unauthorised or unlawful processing and against accidental loss, destruction or damage

Timely response to your requests:

  • We have to respond to your requests without undue delay and in any event within 1 month after receipt of your request. We may extend that period by two further months when necessary, taking into account the complexity and number of the requests. We have to inform you of any such extension within 1 month after receipt of your request, together with the reasons for the delay.

6. Artificial Intelligence and Automated Data Processing

We utilise professional, enterprise-tier Artificial Intelligence (AI) and automation tools (including API integrations with services like Google Gemini) to assist with software development, operational workflows, and client support.

Data Privacy: We do not submit confidential client information or personally identifiable information (PII) into public AI training datasets. All AI processing is conducted using paid/developer endpoints with strict data retention and non-training commitments.

Automated Decision-Making: We do not carry out automated decision-making or profiling that produces legal or significantly impactful effects on individuals as defined under UK GDPR Article 22.

7. Cookies

Our website uses cookies and similar technologies to help it function properly, understand how visitors use the site, and support optional features such as embedded content or analytics.

We use CookieYes to manage cookie consent. When you first visit our website, you'll see a cookie banner allowing you to accept, reject, or customise which categories of cookies you consent to (other than strictly necessary cookies, which are required for the site to function).

Categories of cookies we may use include:

  • Necessary cookies— required for the website to work (e.g., security, load balancing); these don't require consent
  • Analytics cookies — help us understand how visitors use the site (e.g., Google Analytics), used only with your consent
  • Performance cookies — used to understand and analyse the key performance indexes of the website which helps in delivering a better user experience for our visitors
  • Functional cookies — remember your preferences and enhance your experience
  • Advertisment cookies — used to track visitors for advertising purposes, including tracking clicks on affiliate links, used only with your consent

You can change or withdraw your cookie consent at any time via the cookie preferences link on our website (in the footer), managed through CookieYes.

If you object to cookies or want to delete any cookies that are already stored on your computer, you should follow the instructions for deleting existing cookies and disabling future cookies on your web browser or equivalent software. Further information is available at www.aboutcookies.org.

8. Complaints

We take the protection of the Personal Data we hold very seriously and are happy to receive any queries or concerns you may have. If you believe that we have not adhered to this policy or that your data has been handled in a way that you feel is not in accordance with your wishes then you may complain to our Data Controller via email as follows: [email protected].

Alternatively, you may contact the Information Commissioners Officer (ICO) directly who are the body responsible for managing data protection compliance in the UK. You can contact the ICO at the following address:

Information Commissioner's Office
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire,
SK9 5AF

Tel: +44 303 123 1113
Email: [email protected]