1. Data Controller Identification
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller responsible for your personal information is:
Compella Tech Ltd
Company Registration Number (England & Wales): 16957367
Registered Office: 128 City Road, London, United Kingdom, EC1V 2NX
Data Privacy Contact: support@compellatech.com
2. Personal Data We Collect
We only collect personal information that is reasonably necessary to fulfill legitimate business communication and informational requests. The categories of information collected comprise:
| Data Category | Examples of Data | Purpose of Collection |
|---|---|---|
| Identity & Contact Information | Name, corporate email address, business organization name, role/title. | Responding to inquiries, establishing business communication, providing quotations. |
| Technical & Device Information | IP address, browser type and version, operating system, standard server access logs. | Ensuring website security, preventing malicious traffic, system administration. |
| Correspondence & Project Records | Email communications, technical project specifications, agreed statement of work documents. | Delivering agreed technology services, project management, statutory record-keeping. |
Note: We do not process credit card data, bank account payment details, or consumer transactional payment information through this website.
3. Lawful Bases for Processing
Under Article 6 of the UK GDPR, we rely on the following lawful bases to process personal data:
- Legitimate Interests: Processing necessary to respond to client inquiries, maintain the security and resilience of our IT infrastructure, and manage B2B business relationships.
- Contractual Performance: Processing necessary to take preparatory steps at your request prior to entering into a contract or to perform an agreed statement of work.
- Legal Compliance: Processing necessary to comply with applicable statutory duties, corporate governance, and tax/accounting requirements under UK law.
4. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or statutory reporting requirements. General inquiries that do not result in a commercial engagement are deleted or anonymized within 24 months. Contractual records and business correspondence are retained for 6 years in accordance with UK statutory limitation periods.
5. Data Security
We maintain rigorous technical and organizational measures to safeguard personal data against unauthorized access, alteration, disclosure, or accidental destruction. These measures include TLS/SSL encryption for data in transit, encrypted storage protocols, strict role-based access controls, and periodic security hygiene reviews.
6. International Transfers
Where third-party service providers (such as cloud hosting or secure email routing) process data outside the United Kingdom, we ensure appropriate safeguards are implemented in compliance with Chapter V of the UK GDPR, such as the UK International Data Transfer Agreement (IDTA) or standard contractual clauses with adequacy regulations.
7. Your Statutory Data Rights
Under UK data protection law, you possess enforceable rights regarding your personal information:
- Right of Access: Request a copy of the personal data we hold about you (Data Subject Access Request).
- Right to Rectification: Request correction of inaccurate or incomplete personal records.
- Right to Erasure: Request deletion of your personal data where there is no lawful justification for continued retention.
- Right to Restriction: Request temporary restriction of processing under certain legal circumstances.
- Right to Object: Object to processing grounded on legitimate interests.
To exercise any of these statutory rights, please contact us in writing at support@compellatech.com. We will respond within one calendar month in accordance with statutory requirements.
8. Supervisory Authority & Complaints
If you have concerns about our data protection practices, we invite you to contact us directly in the first instance so we can resolve the matter promptly. You also possess the statutory right to lodge a complaint with the UK supervisory authority: