Skip to content
CUSR
Back to home
Legal

Privacy Policy

Last updated: 19 April 2026

Introduction

This Privacy Policy explains how CUSR ("we", "us", or "our") collects, uses, stores, and protects your personal data when you visit our website at cusr.co.uk. We are committed to protecting your privacy and handling your data transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

Data Controller

CUSR is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, you can contact us at:

What Data We Collect

We collect personal data only when you voluntarily submit it through our contact form. This includes:

  • Your name
  • Your email address
  • Your phone number (if provided)
  • Your message or enquiry details

We do not currently use analytics tracking or collect data through cookies for marketing purposes.

How We Use Your Data

We use the personal data you provide solely for the following purposes:

  • To respond to your enquiry or request
  • To provide you with information about our services
  • To communicate with you regarding potential or ongoing projects

We will never sell, rent, or share your personal data with third parties for marketing purposes.

Legal Basis for Processing

Under UK GDPR and EU GDPR, we process your personal data on the following legal bases:

  • Legitimate Interests (Article 6(1)(f)) — to respond to enquiries submitted through our contact form and to manage our business communications.
  • Consent (Article 6(1)(a)) — where you have explicitly consented to us contacting you, for example by submitting the contact form.

You may withdraw your consent at any time by contacting us at [email protected].

Third-Party Services

Our website uses the following third-party services that may process limited data:

  • Cloudflare — provides CDN, DNS, and DDoS protection. Cloudflare may process your IP address and place essential security cookies. See Cloudflare's Privacy Policy for details.
  • Cloudflare Turnstile — used on our contact form to verify you are a real person. This processes interaction data but does not track you across sites.
  • Google Fonts — serves the typefaces used on our website (Sora and DM Sans). Google may briefly log your IP address when fonts are loaded. See Google's Privacy Policy for details.
  • Microsoft Azure — our contact form submissions are sent via Azure. Microsoft processes this data on our behalf under a data processing agreement.

We have selected these providers for their strong privacy practices and compliance with data protection regulations.

Cookies

Our website uses only essential cookies required for security and proper site functionality. We do not use advertising, analytics, or tracking cookies. For full details on the specific cookies we use, please see our Cookie Policy.

View our Cookie Policy

Data Retention

We retain personal data submitted through the contact form for as long as necessary to fulfil the purpose for which it was collected. Typically this means:

  • Enquiry data is retained for up to 12 months after our last communication with you.
  • If an enquiry leads to a project, data is retained for the duration of the business relationship plus 6 years for legal and accounting obligations.

You can request deletion of your data at any time by contacting us.

Your Rights

Under UK GDPR and EU GDPR, you have the following rights regarding your personal data:

  • Right of Access — request a copy of the personal data we hold about you.
  • Right to Rectification — request correction of inaccurate or incomplete data.
  • Right to Erasure — request deletion of your personal data where there is no compelling reason for continued processing.
  • Right to Restrict Processing — request that we limit how we use your data.
  • Right to Data Portability — request your data in a structured, machine-readable format.
  • Right to Object — object to processing based on legitimate interests.
  • Right to Withdraw Consent — withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or, for EU residents, your local Data Protection Authority.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: