Privacy Policy

Cited & Co is a trading name of [Legal entity name], a search agency based in the United Kingdom. For the purposes of data protection law, [Legal entity name] is the data controller for the personal information you submit through this website.

We only collect personal data that you choose to give us through the contact form on this site. The fields are:

• Name — so we know who we are talking to
• Email address — so we can reply to you
• Company (optional) — for context about your enquiry
• Monthly marketing budget (optional) — to help us understand the scope
• Your message — the substance of what you are trying to solve

We use the information you submit to read your enquiry, decide whether we can help, and reply to you. We do not use it for any other purpose, and we do not send marketing emails to people who use the contact form.

The legal basis on which we process your personal data is legitimate interests (Article 6(1)(f) of the UK GDPR) — specifically, our interest in responding to enquiries and assessing whether a working relationship makes sense. If you ask us to stop, we will.

Contact submissions are stored in a secure, access-controlled database hosted by our infrastructure provider, which acts as a data processor on our behalf. We do not sell your data, share it with third parties for marketing, or transfer it outside the service that processes it.

We do not use analytics, advertising, or tracking cookies on this website. The site loads fonts from Google's CDN, which may set cookies on your browser; you can manage or block these through your browser settings.

We keep contact submissions for 24 months from your most recent message. After that, we delete them. If you ask us to delete your data sooner, we will do so without question.

We share your data only with our database hosting provider, which processes it on our behalf as a data processor under a contract that requires equivalent protection. We do not share contact submissions with any other third party unless we are legally required to.

Under UK data protection law you have the following rights regarding the personal data we hold about you:

• The right to be informed about how we use your data (this policy)
• The right of access — you can ask what data we hold about you
• The right to rectification — you can ask us to correct anything that is inaccurate
• The right to erasure — you can ask us to delete your data
• The right to restrict processing — you can ask us to limit how we use it
• The right to object — you can ask us to stop processing your data
• The right to data portability — you can ask for your data in a structured format

To exercise any of these rights, or to ask a question about how we handle your data, send us a message through our contact page. We will respond within 30 days and will not make it difficult for you.

If you are unhappy with how we have handled your data and we cannot resolve it between us, you have the right to complain to the Information Commissioner's Office (ICO), the UK's independent authority for data protection. You can do so at ico.org.uk.

We may update this policy from time to time. If we make a material change, we will update the review date at the top of this page. We will not broaden the scope of how we use your data without telling you.