Privacy

What we collect, why, on what basis, how long we keep it, who else sees it, and what you can ask us to do.

Who is responsible

CS Platforms Ltd, Unit 2, 7 Tarves Way, London SE10 9JP, company number 15214067, is the controller for the personal data described here. Write to mail@ceilingsurf.co.uk for anything on this page.

This notice applies to visitors wherever they are. If you are in the EEA, you may complain to your own national supervisory authority as well as to ours.

When you contact us

What. Your name, email address, telephone number if you give one, company, trade, and whatever you write in the message.

Why, and on what basis. To answer you and to arrange a demonstration. The basis is the steps taken at your request before entering into a contract, and our legitimate interest in replying to someone who asked us to get in touch.

How long. Three years from our last contact with you, then deleted. Where a demonstration or a supply follows, the records belonging to that relationship are kept for as long as it lasts and for the periods the law requires of us afterwards.

When you subscribe to an update

What. Your email address and name. Why. To send the update you asked for. Basis. Your consent. How long. Until you unsubscribe, which every message lets you do in one click, and no longer than two years after your last interaction.

When you visit the site

What. With your permission, Google Analytics records the pages you open, how you arrived, approximate location from a shortened IP address, and the device and browser in general terms. Where a page carries a YouTube film and you allow it, Google receives the request for that film.

Why, and on what basis. To understand which pages are useful and to show films without hosting them ourselves. The basis is your consent, given per category in the banner and withdrawable at any time on the cookies page.

How long. Analytics event data is retained for fourteen months and then deleted. Your consent record is kept for twelve months so that we can show what was agreed and when.

What we do not do. We do not use analytics for advertising, we do not enable cross-site identification, and we do not combine it with your enquiry. Nothing in this section loads before you choose, and our own product film is served from our own site and sets nothing.

Who else sees your data

Nimble serves the enquiry form and holds the enquiry as our customer-records system. Google provides Analytics and YouTube, where you have allowed them. Our website host serves the pages, and our email provider carries the reply. Each acts on our instructions under a written agreement, including the data processing terms we have accepted with Google, and none uses your data for its own purposes.

We do not sell personal data and we do not share it for advertising. We disclose it where the law or a court order requires. If the business is sold or merges, enquiry records may pass to advisers and to the buyer.

Transfers outside the UK

Google Ireland Limited acts for us in the European Economic Area and Google LLC in the United States. Those transfers rest on the International Data Transfer Addendum to the Standard Contractual Clauses. For our other providers we rely on UK adequacy regulations or on the same addendum, and we can tell you which applies to which provider.

Security

Access is limited to the people who need it, connections are encrypted, and the arrangements are reviewed. We require the same of anyone processing data on our behalf.

Your rights

You can ask for a copy of what we hold, a correction, deletion, restriction of what we do with it, and portability. You can object to processing that rests on legitimate interest. Where we rely on consent, you can withdraw it at any time, which does not affect what was done before you did.

Write to mail@ceilingsurf.co.uk. We answer within one month; if a request is complex we will tell you within that month and may take up to three in total. Please identify yourself clearly so that we do not act on the wrong person's data.

Complaints

If you are unhappy with how we handle your data, tell us first. You also have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or at ico.org.uk.

Children

This website is not directed at children and we do not seek personal data from anyone under the age of consent in their country of residence.

Changes

We may amend this notice. Material changes are dated here, and we tell you directly where we reasonably can.