Privacy Policy | CMS Financial Advisory & Consulting

Introduction

CMS Financial Advisory and Consulting Ltd ("we", "our", "us") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you visit our website or engage with our services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection law, the data controller is CMS Financial Advisory and Consulting Ltd.

Information We Collect

We may collect and process the following personal data:

Identity data: your name and job title.
Contact data: your email address, telephone number, organisation name, and postal address.
Communications data: any information you provide when contacting us through our website contact form, by email, or by telephone.
Technical data: your IP address, browser type and version, time zone setting, operating system, and other technology identifiers on the devices you use to access this website.
Usage data: information about how you use our website, including pages visited and navigation paths.

How We Collect Your Data

We collect personal data through the following means:

Direct interactions: when you complete our contact form, send us an email, speak with us by telephone, or engage us for consulting services.
Automated technologies: as you navigate our website, we may automatically collect technical and usage data through cookies and similar technologies.
Third parties: we may occasionally receive your contact details from professional networks, referrals, or publicly available sources in connection with our consulting services.

How We Use Your Data

We use your personal data for the following purposes:

To respond to your enquiries and provide information about our services.
To deliver our consulting and advisory services under a contract with you or your organisation.
To manage our relationship with you, including communicating updates relevant to our engagement.
To improve our website, services, and user experience.
To comply with legal and regulatory obligations.

Lawful Basis for Processing

We rely on the following lawful bases under the UK GDPR to process your personal data:

Consent: where you have given clear consent for us to process your data for a specific purpose, such as when you submit our contact form.
Contract: where processing is necessary for the performance of a contract with you or your organisation, or to take steps at your request before entering into a contract.
Legitimate interests: where processing is necessary for our legitimate business interests, such as improving our services, provided these are not overridden by your rights and interests.
Legal obligation: where processing is necessary to comply with a legal obligation to which we are subject.

Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data with:

Professional advisers, including accountants and legal advisers, where necessary.
IT service providers who assist with the operation and security of our website and systems.
Regulatory bodies and law enforcement agencies, where required by law.

Any third parties with whom we share data are required to respect the security of your personal data and process it in accordance with applicable law.

Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Contact form submissions are typically retained for up to 24 months unless a longer retention period is required.

When your data is no longer required, we will securely delete or anonymise it.

Cookies

Our website may use cookies — small text files placed on your device — to improve your browsing experience and help us understand how our website is used. You can manage your cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain parts of our website.

Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your personal data in certain circumstances.
Right to restrict processing: to request that we limit how we use your data.
Right to data portability: to request transfer of your data to another party in a structured, commonly used format.
Right to object: to object to our processing of your data where we rely on legitimate interests.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month.

Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of any website you visit.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

CMS Financial Advisory and Consulting Ltd
Email: info@cmsadvisory.co.uk
Phone: +44 (0) 20 7946 0123

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are concerned about how we handle your personal data. You can contact the ICO at ico.org.uk.