Privacy policy
Last updated 14 November 2026
1. Who we are
Corporate Software Solutions Ltd, company number 17523461, registered in England and Wales, registered office 51 Kingswood Road, Moseley, Birmingham, England, B13 9AN. Email: contact@csoftwaresolutions.co.uk.
We are the controller of the personal information described in this policy, which means we decide how and why it is used. We are registered with the Information Commissioner’s Office (ICO) and pay the data protection fee.
2. What this policy covers
This policy explains what personal information we collect through this website, why we collect it, who we share it with, how long we keep it and the rights you have over it. It covers this website and the enquiries and call-back requests sent through it. It does not cover the websites of other organisations that we link to.
3. The information we collect
The contact form asks for your name, email address, phone number, what you need and a message, and your company and current website, if you give them.
You don’t have to give us any of this information, but we need your name and a way to contact you to reply. If you’d rather not use the form, you can email us instead.
If you ask us to call you, the call-back form on the contact page asks for your name, your phone number, a good time to call and what you would like to talk about. We use them only to call you about that request.
The box that asks what you need, on the home, services and work pages, takes what you type there to the contact form in the page address, where it becomes the start of your message. The form removes it from the address once it has read it, and nothing reaches us until you send the form. The company that hosts the website receives that page address, as it does with any page request.
If you email us, we receive your email address and whatever you choose to include in your message.
When you visit the website, the company that hosts it receives the technical information every website receives: your IP address, the page you asked for, your browser and the time of the visit. It uses this to deliver the pages and to protect the website from attacks. We do not use it to identify you.
We do not ask for, and ask you not to send, special category information such as health details.
4. How we use it and our lawful basis
We use the information you send to reply to your enquiry, to call you back if you asked us to, and to discuss and prepare a proposal for the work you have asked about. We ask for your phone number so that we can call you when a call is quicker or clearer than a written reply.
Our lawful basis is that this is necessary to take steps you have asked for before we may enter into a contract with you (UK GDPR Article 6(1)(b)). Where you write on behalf of a business, or your message is not about a possible project, we rely on our legitimate interest in answering the people who contact us (Article 6(1)(f)).
The technical information from visits is used on the basis of our legitimate interest in keeping the website working and secure.
If your enquiry becomes a project, the information is kept as part of our project and business records, which we keep to meet our legal and accounting obligations (Article 6(1)(c)).
We do not use your information for marketing, we do not sell it, and we do not make decisions about you by automated means.
5. Who we share it with
We share personal information only with the service providers that help us run the website and our email, and only as far as they need it to provide their service:
- Cloudflare, which hosts the website and runs the spam check on our forms;
- Resend, which delivers the messages sent through our forms to our inbox;
- Google Workspace, which hosts our email.
Each acts on our instructions under a data processing agreement. Cloudflare also uses the signals from the spam check to improve its bot detection, as a controller in its own right; its Turnstile privacy notice explains how. We may also disclose information where the law requires it, for example to a court or a regulator.
6. International transfers
Cloudflare, Resend and Google are based in the United States and may process information there. Where personal information leaves the UK, it is protected by the UK’s data bridge with the United States (the UK Extension to the EU-US Data Privacy Framework) or by the international data transfer agreements the UK approves.
7. How long we keep it
We keep enquiries and call-back requests, and the emails that follow them, for 12 months. After that we delete them, unless the enquiry has become a project.
If it becomes a project, we keep the information with our project and business records for as long as the law requires. That is usually six years after the end of the financial year in which the work was completed.
8. Your rights under UK GDPR
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use it;
- object to our using it where we rely on legitimate interests;
- ask for the information you gave us in a format that can be moved to another organisation.
To use any of these rights, email us using the details in section 13. We will reply within one month. There is usually no charge.
9. Cookies and analytics
This website does not use analytics and does not track you. It sets no cookies. The spam check on the contact page reads technical information about your browser only to protect the forms, which is strictly necessary for them to work. The cookie policy explains them.
10. Security
The website is served only over an encrypted connection, and what you send through the forms is encrypted on its way to us. Access to our email and to the services above is limited to the people who need it and protected by two-step sign-in. No method of sending information over the internet is completely secure, but we take care to protect what you send us.
11. Children
This website is for businesses and is not aimed at children. We do not knowingly collect information from anyone under 18.
12. Changes to this policy
We will update this policy if the way we use personal information changes. The date at the top of the page shows when it was last changed.
13. How to contact us and how to complain to the ICO
Email contact@csoftwaresolutions.co.uk. We usually reply within 24 hours. If you would rather talk, ask us to call you.
If you are unhappy with how we have used your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk/make-a-complaint.