Privacy Policy
Last updated: 25 October 2026
Your personal information will be handled with care and used for the purposes explained in this policy.
This policy explains how CMYSZ Limited collects and uses personal information when you visit this website, make an enquiry, subscribe to updates or use my services.
Who is responsible?
CMYSZ Limited is the data controller for the information covered by this policy.
Company number: SC861734, registered in Scotland.
Registered office: 5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN.
Privacy enquiries: hello@cmysz.com
References to “I”, “me” and “my” describe my work on behalf of the company.
Where information is processed on a client’s instructions, that client may be the data controller. Such processing is governed by the relevant client agreement and data processing arrangements.
Information collected
Depending on your interaction with the business, information may include:
- Your name, contact details, job title and organisation.
- Enquiries, questionnaires, bookings and correspondence.
- Project information, meeting notes and service records.
- Billing information, payment status and transaction references.
- Newsletter preferences, consent and unsubscribe records.
- Technical information, including IP addresses, browser details, website activity and security logs.
- Account or system information needed for agreed work.
Information is normally provided directly by you or collected through the services you use to contact me. It may also come from your organisation, an authorised representative, a referral contact or publicly available professional sources.
Please provide only information relevant to your enquiry or agreed work. Credentials and sensitive information should be shared using an agreed secure method.
Purposes and lawful bases
Personal information is used only where an appropriate lawful basis applies.
| Purpose | Lawful basis |
|---|---|
| Arranging services you wish to purchase personally | Steps taken at your request before entering into a contract |
| Delivering a contract with you personally | Performance of that contract |
| Communicating with representatives of clients and suppliers | Legitimate interests in managing relationships and delivering services |
| Handling ordinary enquiries and business administration | Legitimate interests in operating the business and responding to requests |
| Meeting accounting, tax and statutory requirements | Legal obligation |
| Protecting systems, preventing misuse and managing claims | Legitimate interests in security and protecting the business and its clients |
| Sending a newsletter you have requested | Consent |
Where legitimate interests are relied upon, your rights and reasonable expectations are considered.
If information is required for a contract or legal obligation, this will be explained when it is requested. Without it, the relevant service may not be available.
Newsletters
Newsletters are sent where you have chosen to subscribe. You may withdraw consent using the unsubscribe link or by emailing hello@cmysz.com.
Unsubscribing does not stop necessary communications about bookings, invoices or ongoing services.
Subscription tools manage preferences, consent, delivery and unsubscribe requests. Limited consent and suppression records may be retained to respect your choices.
Where email engagement tracking is enabled, it may record opens, link clicks and related technical information. Tracking requiring consent will be used only where that consent has been obtained. Newsletter consent does not, by itself, provide consent to optional tracking.
Cookies and analytics
The website may use cookies and similar technologies to operate features, maintain security and understand website use.
Where consent is required, optional technologies will be used only after you agree. You may refuse them or withdraw consent through the available controls.
Information about the technologies in use and relevant choices will be provided through the website’s cookie information and controls.
Sharing information
Information may be shared where necessary with:
- Providers supporting hosting, email, bookings, customer management, payments, storage and collaboration.
- Contractors supporting agreed work.
- Accountants, legal advisers, insurers and other professional advisers.
- Public authorities where legally required.
Providers acting on the company’s instructions are subject to appropriate contractual requirements. Some providers and professional advisers act as independent data controllers.
Personal information is not sold.
International transfers
Some providers may store or access information outside the United Kingdom.
Restricted transfers require an appropriate legal mechanism, such as UK adequacy regulations or approved contractual safeguards, together with any required assessment and additional protections.
Please contact hello@cmysz.com for information about relevant safeguards and how to obtain a copy, subject to necessary redactions.
Retention
Information is retained only while needed for its purpose.
Retention is determined by the information involved, the ongoing relationship, accounting and legal obligations, insurance requirements and relevant periods for legal claims.
Enquiry records are reviewed after the enquiry concludes. Client records are retained where needed to administer the engagement and meet continuing obligations. Account access is removed when no longer required.
Newsletter information is retained while you remain subscribed, with limited consent and suppression records kept afterwards where necessary.
Information no longer required is securely deleted or anonymised. Backup copies are removed through the applicable backup retention cycle.
Security and sensitive information
Appropriate technical and organisational measures are used to protect information against loss, misuse and unauthorised access or disclosure.
Access is limited to authorised people who need the information for their work.
Please do not include health or other sensitive information in general enquiries unless necessary. Where such information is required, including for an accessibility adjustment, its purpose and the additional legal condition for processing will be explained. Explicit consent will be requested where appropriate.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your information. You may also object to processing based on legitimate interests and withdraw consent where processing relies on it.
You may object to direct marketing at any time.
Please send requests to hello@cmysz.com. Reasonable identity checks may be required. Requests are normally free and will be handled within the applicable statutory timeframe.
Withdrawing consent does not affect processing lawfully carried out before withdrawal.
Questions and complaints
Please email hello@cmysz.com with any concerns or requests for an alternative format.
You may also complain directly to the Information Commissioner’s Office, the UK data protection regulator.
Changes
Updates will be published on this page with a revised date. Where required, material changes will be brought to your attention before information is used for a new purpose.