Privacy policy
How CERNIQ LTD collects, uses and protects personal data.
Last updated: 7 November 2026
Who we are
CERNIQ LTD (“Cerniq”, “we”, “us”) is a company registered in England and Wales, company number 16077187. Our registered office is Office 1, Izabella House, 24–26 Regent Place, Birmingham B1 3NJ, United Kingdom.
We are the controller of the personal data described in this policy, and we are registered with the Information Commissioner’s Office (ICO). Where we handle personal data on a client’s behalf as part of a project, we act as that client’s processor under a written agreement, and the client’s own privacy notice applies.
For any privacy question or request, email info@cerniq.com.
What we collect
When you contact us
Through our contact form: your name, email address, phone number (optional), company, subject, what you need help with, number of staff, rough budget and your message. We also keep the emails we exchange with you.
When you request a Website Risk Scan
Your name, email address, the website address you ask us to check, your company and any notes. The scan looks only at publicly available technical information about that website and its domain.
When you become a client
Contact and billing details, agreements, project records and our communications with you.
Review invitations
If you are a client, we may invite you to review us on Trustpilot. To do this we share your name and email address with Trustpilot. Leaving a review is optional, and you can ask us not to invite you.
When you visit our website
Our website uses only cookies that are needed for it to work, such as keeping it secure and remembering your language. We do not use advertising or analytics tracking cookies. Our hosting provider keeps standard server logs (such as IP address and browser type) for security.
Information about organisations
Some of our services, including our services for care agencies, use publicly available information about registered organisations, such as data published by the Care Quality Commission (CQC) under the Open Government Licence. This is information about organisations, not individuals. We design these services so that we do not store personal information about individuals, and we remove any that is included by mistake.
How we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and preparing a quote | Legitimate interests, or steps you ask us to take before a contract |
| Running a Website Risk Scan you request | Legitimate interests (providing what you asked for) |
| Delivering our services and managing our relationship with you | Contract |
| Invoicing, accounts and keeping legal records | Legal obligation |
| Inviting clients to leave a review | Legitimate interests (you can opt out at any time) |
| Keeping our website and systems secure | Legitimate interests |
| Sending occasional updates about our services | Your consent, or for existing clients, similar services with an easy opt-out in every message |
We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
International transfers
Some of our providers may store or process data outside the UK. When they do, we make sure the transfer is protected, for example by relying on UK adequacy regulations or approved contract terms such as the International Data Transfer Agreement or Addendum.
How long we keep it
- Enquiries that do not lead to work: up to 2 years
- Client records, contracts and invoices: 6 years after our work ends, to meet tax and legal requirements
- Website Risk Scan requests and results: 12 months
- Marketing preferences: until you opt out
We securely delete or anonymise data when it is no longer needed.
How we protect it
We protect personal data with access limited to people who need it, two-step login on our accounts, encrypted connections and regular reviews of our own security.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of your personal data
- ask us to correct it
- ask us to delete it
- ask us to restrict how we use it
- object to how we use it, including stopping marketing at any time
- ask us to transfer it to you or another organisation
- withdraw consent where we rely on it
To use any of these rights, email info@cerniq.com. There is normally no charge, and we will reply within one month.
Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk or 0303 123 1113.
Children
Our services are for businesses and are not aimed at anyone under 18.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.