Privacy Policy

1. Who we are

CB Transformation is a UK-based operational and digital transformation consultancy. We are the data controller for the personal information we collect through this website and in the course of our business activities.

Business name: CB Transformation
Founder: Chris Bones
Email: hello@cbtransformation.co.uk
Website: www.cbtransformation.co.uk

2. What information we collect

We may collect the following types of personal information:

• Contact information — your name, email address, phone number and organisation name when you submit an enquiry through our website or contact us directly
• Enquiry details — information you provide about your organisation, current systems, operational challenges and what you are looking to improve
• Communication records — emails, notes and records from calls or meetings where you have engaged with us
• Website usage data — anonymised data about how visitors use our website, collected via analytics tools (see section 6)

We do not collect sensitive personal data (such as health information, political views or financial details) through this website.

3. How we use your information

We use your personal information for the following purposes:

• To respond to enquiries you submit through our website contact form
• To arrange and conduct discovery calls and consultancy engagements
• To provide our services and deliver agreed work
• To send you information relevant to your enquiry or engagement
• To improve our website and understand how people find and use it
• To meet any legal or contractual obligations

We do not use your personal information for automated decision-making or profiling.

4. Our legal basis for processing

Under UK GDPR, we rely on the following legal bases to process your personal information:

• Legitimate interests — to respond to enquiries, manage client relationships and operate our business
• Contract performance — where we are delivering services under an agreed engagement or statement of work
• Consent — where you have specifically agreed to receive communications from us
• Legal obligation — where we are required to process data to comply with applicable law

5. How we share your information

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

• Form submissions — enquiries submitted through our website forms are processed by Web3Forms, which securely handles submissions and forwards notifications to our email inbox
• Legal requirements — if we are required to disclose information by law, court order or regulatory authority

Any third-party tools we use are selected carefully and are required to handle your data securely and in accordance with applicable data protection law.

6. Cookies and website analytics

Our website uses a small number of cookies to help it function and to understand how visitors use it.

• Essential cookies — necessary for the website to function, including remembering your cookie consent preference
• Analytics cookies — we use Google Analytics, Microsoft Clarity and HubSpot tracking to understand website usage. This data is used to improve our website and content

You can accept or decline non-essential cookies when you first visit our website. You can also manage cookie preferences through your browser settings at any time.

For more information about Google Analytics and how to opt out, visit tools.google.com/dlpage/gaoptout. For more information about Microsoft Clarity's privacy practices, visit privacy.microsoft.com/privacystatement. For more information about HubSpot's privacy practices, visit legal.hubspot.com/privacy-policy.

7. How long we keep your information

We retain personal information only for as long as necessary for the purposes it was collected:

• Enquiries that do not progress — we will retain contact details and enquiry information for up to 12 months, after which they will be deleted
• Active client engagements — we retain information for the duration of the engagement and for 6 years afterwards to meet any legal or contractual obligations
• Marketing communications — until you unsubscribe or withdraw consent

8. Your rights

Under UK data protection law, you have the following rights regarding your personal information:

• Right of access — to request a copy of the personal information we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete information
• Right to erasure — to request that we delete your personal information in certain circumstances
• Right to restrict processing — to ask us to limit how we use your information
• Right to data portability — to receive your information in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at hello@cbtransformation.co.uk. We will respond within one calendar month.

9. Data security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss or misuse. These include secure email, password-protected systems and careful selection of third-party tools.

While we take appropriate precautions, no method of transmission over the internet is completely secure. If you have concerns about the security of your information, please contact us.

10. International transfers

Some of the third-party services we use (including Web3Forms, Google Analytics, Microsoft Clarity and HubSpot tracking) may process data outside the UK or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner's Office (ICO).

11. Links to other websites

Our website may contain links to third-party websites, including LinkedIn. We are not responsible for the privacy practices of those websites and recommend you review their privacy policies before submitting any personal information.

12. Changes to this policy

We may update this privacy policy from time to time. When we make material changes, we will update the date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are published constitutes your acceptance of the updated policy.

13. Complaints

If you have a concern about how we handle your personal information that we are unable to resolve, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would appreciate the opportunity to address your concern directly before you contact the ICO, so please reach out to us first if possible.