Last Updated: January 2025
1. Data Controller
CCKE is the data controller for personal data collected through this website. We are a global compliance consultancy specialising in health and social care services, with offices in England, Australia, and Canada.
Contact Details:
Email: [email]
Address: [address]
2. What Data We Collect
We collect personal data in the following ways:
Contact Information: Name, email address, phone number, job title, and organisation when you contact us or request information
Website Usage Data: IP address, browser type, pages visited, and time spent on our website through cookies and analytics tools
Service Data: Information provided when you engage our consultancy services, including compliance documentation and communications
Marketing Data: Email address and communication preferences if you subscribe to our newsletter or marketing communications
3. How We Use Your Data
We use your personal data for the following purposes:
Responding to enquiries and providing consultancy services
Sending newsletters, updates, and marketing communications (with your consent)
Improving our website and services through analytics
Complying with legal and regulatory obligations
Protecting our legal rights and preventing fraud
4. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR:
Consent: For marketing communications and non-essential cookies
Contract: To provide consultancy services you have requested
Legal Obligation: To comply with health and social care regulations and other applicable laws
Legitimate Interests: To improve our services, prevent fraud, and protect our business interests
5. Data Sharing
We do not sell your personal data. We may share your data with:
Service Providers: Third parties who assist us in delivering our services (e.g., hosting providers, email services) under data processing agreements
Legal Requirements: Regulatory bodies, law enforcement, or other authorities when required by law
International Transfers: As we operate in England, Australia, and Canada, your data may be transferred internationally. We ensure appropriate safeguards are in place for such transfers
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:
Service Data: Retained for the duration of the engagement plus 7 years for legal and compliance purposes
Contact Enquiries: Retained for 2 years unless you request deletion
Marketing Data: Retained until you unsubscribe or withdraw consent
Website Analytics: Retained for up to 26 months
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right of Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your data (subject to legal obligations)
Right to Restrict Processing: Request that we limit how we use your data
Right to Data Portability: Request your data in a portable format
Right to Object: Object to processing for marketing or legitimate interests purposes
Right to Withdraw Consent: Withdraw consent for processing at any time
Rights Related to Automated Decision-Making: Request human review of automated decisions