Privacy notice
This notice explains how Callaghan IT Services Ltd ("we", "us", "our") collects, uses, and protects personal data submitted through this website (callaghanitservices.co.uk). We process data in accordance with UK GDPR and the Data Protection Act 2018.
1. Who we are
Callaghan IT Services Ltd is an independent IT consultancy registered in England and Wales. We are the data controller for personal data processed via this website.
2. What data we collect
When you submit an enquiry via the contact form, we collect:
- Your name
- Your email address
- Your organisation name (optional)
- The content of your message
We do not collect payment data, sensitive personal data, or data from children. We do not use tracking cookies, analytics scripts, or advertising technologies.
3. Why we collect it and our legal basis
We collect enquiry data in order to respond to your message and, where relevant, to discuss a potential engagement. Our legal basis is legitimate interests (UK GDPR Article 6(1)(f)) — specifically, the legitimate interest of communicating with prospective clients who contact us.
4. How we use your data
Submitted enquiry data is:
- Forwarded to the company email address via Resend (see section 5)
- Used solely to respond to your enquiry
- Not sold, rented, or shared with third parties for marketing purposes
- Not used to create automated profiles or for automated decision-making
5. Third-party processors
We use the following sub-processors to operate this website:
| Processor | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Website hosting (Cloudflare Pages), DDoS protection, CAPTCHA (Turnstile) | USA — EU SCCs in place |
| Resend, Inc. | Transactional email delivery of enquiry submissions | USA — EU SCCs in place |
Each processor has been selected on the basis of data minimisation and appropriate transfer safeguards. No enquiry data is retained by these processors beyond the transient period required to complete the relevant operation.
6. Retention
Enquiry emails are retained in our mailbox for up to 24 months, or until the enquiry is resolved, whichever comes first. We may retain correspondence longer where required for contract or legal purposes.
7. Cookies and tracking
This website does not use analytics cookies, tracking pixels, or any form of
behavioural advertising. Cloudflare may set a strictly necessary session cookie
(__cf_bm) for bot-management purposes; this cookie does not track
you across sites and expires when you close your browser.
8. Your rights
Under UK GDPR you have the right to:
- Access personal data we hold about you
- Rectify inaccurate data
- Erase your data (subject to legitimate interests and legal obligations)
- Restrict processing in certain circumstances
- Object to processing based on legitimate interests
- Data portability of data you have provided
To exercise any of these rights, email adam.callaghan@callaghanitservices.com. We will respond within one calendar month.
If you are unsatisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Changes to this notice
We may update this notice from time to time. The "last updated" date at the top of this page reflects when material changes were last made.