Privacy Policy


Last updated: 11.09.2025

CDIT Consulting Limited (“CDIT”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your personal data when you interact with us, visit our website (www.cdit.co.uk), or use our services.


1. Who we are

  • CDIT Consulting Limited is a company registered in England and Wales.
  • Company number: 15901630
  • Contact email: hello@cdit.co.uk


We are the data controller for the purposes of UK data protection laws.


2. What information we collect

We may collect and process the following personal data:

  • Contact details such as name, email address, phone number, and job title.
  • Business details such as company name, role, and project information.
  • Website usage information including IP address, browser type, and analytics data through cookies (see Section 8).
  • Communication records such as emails, enquiries, and feedback.
  • Service delivery data such as information required to provide consultancy services, including any documentation you provide to us.


We do not intentionally collect sensitive personal data unless required and agreed as part of a service engagement.


3. How we use your information

We use your personal data to:

  • Provide our consultancy services.
  • Respond to enquiries and manage client relationships.
  • Send you relevant updates, proposals, or information about our services (where you have consented or where we have a legitimate business interest).
  • Improve our website and services.
  • Meet our legal, regulatory, and contractual obligations.


4. Legal basis for processing

We process personal data under the following lawful bases:

  • Contract: to provide services you have requested or engaged us for.
  • Legitimate interests: to manage enquiries, improve services, and maintain business operations.
  • Consent: where you have opted in to receive marketing communications.
  • Legal obligation: where we are required to comply with UK law.


5. How we share your data

We do not sell or trade your personal data. We may share it with:

  • Trusted service providers (such as IT hosting, email, and analytics providers).
  • Professional advisers (such as accountants or legal consultants).
  • Regulators or authorities if required by law.


Any third parties we use are bound by contractual obligations to keep your data secure and use it only for the agreed purposes.


6. Data retention

We keep personal data only for as long as necessary to fulfil the purposes set out in this policy, including for legal, accounting, or reporting requirements. Typically:

  • Enquiry data is retained for up to 12 months.
  • Client records are retained for up to 7 years after the end of a contract.


7. International transfers

Where your data is transferred outside the UK, we ensure appropriate safeguards are in place (such as the UK’s International Data Transfer Agreements or other lawful mechanisms).


8. Cookies and website tracking

Our website may use cookies and similar technologies to improve user experience and collect anonymised analytics. You can control cookies through your browser settings.


9. Your rights

Under UK GDPR, you have the following rights:

  • Access your personal data.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your data (subject to certain conditions).
  • Object to processing where we rely on legitimate interests.
  • Restrict processing in certain circumstances.
  • Request transfer of your data to another provider.
  • Withdraw consent to marketing at any time.

To exercise any of these rights, contact us at hello@cdit.co.uk.


10. Security


We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, and destruction.


11. Complaints

If you are unhappy with how we handle your personal data, please contact us first at hello@cdit.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK regulator for data protection (www.ico.org.uk).


12. Updates to this policy


We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “last updated” date.