Privacy policy
Last updated: [DATE TO BE CONFIRMED BEFORE PUBLISHING]
1. Who we are
This website is operated by Cospire Technologies Private Limited ("Cospire", "we", "us", "our"). We are a Salesforce Consulting Partner registered in England and Wales.
Our registered office is: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
You can contact us about privacy matters at: info@cospiretech.com
For the purposes of UK data protection law, Cospire Technologies Private Limited is the data controller in respect of the personal data we collect and process through this website and our services.
2. What personal data we collect
We may collect and process the following categories of personal data:
2a. Data you provide directly
- Contact enquiry data: name, job title, organisation, email address, telephone number, and the content of any message you send through our contact form
- Discovery call booking data: name, email address, and any preferences or notes provided when booking a call
- Business correspondence: any personal data contained in emails, letters or other communications you send to us
2b. Data we collect automatically
- Website usage data: IP address, browser type, device type, operating system, pages visited, time spent on pages, referring URL, and date and time of visit
- Cookie data: information stored in cookies placed on your device (see Section 7 for full details)
2c. Data from third parties
- Where you connect with us via LinkedIn or other professional networks, we may receive profile information you have made publicly available
- Where a Salesforce account executive refers you to us, we may receive basic contact details for the purpose of following up on a co-sell opportunity
3. How we use your personal data
We use your personal data for the following purposes, on the legal bases indicated:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Responding to enquiries submitted via our contact form | Legitimate interests (responding to a business enquiry) | 12 months from last contact, unless an engagement commences |
| Managing discovery call bookings | Legitimate interests (conducting business meetings) | 12 months from last contact |
| Analysing website usage to improve our site and services | Legitimate interests (improving our digital presence) | Up to 26 months (Google Analytics data) |
| Managing Salesforce co-sell referral relationships | Legitimate interests (business development) | Duration of the relevant sales process plus 12 months |
| Complying with legal obligations (e.g. tax records, contractual obligations) | Legal obligation | As required by applicable law, typically 7 years |
| Sending marketing communications (if you have opted in) | Consent | Until you withdraw consent or unsubscribe |
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals.
4. Who we share your data with
We do not sell, rent or trade your personal data. We may share your data with:
- Technology service providers who process data on our behalf, including: website hosting and CMS providers; CRM platform (Salesforce); email and calendar providers; analytics platforms (Google Analytics); booking tools (Calendly or equivalent). All processors are bound by data processing agreements and must process data only on our documented instructions.
- Salesforce account executives in the context of confirmed co-sell opportunities, where sharing is necessary to progress a mutual client engagement and you are aware of the referral.
- Professional advisers (solicitors, accountants and insurers) where necessary for legal, financial or risk management purposes.
- Law enforcement or regulatory authorities, where we are legally required or permitted to do so.
5. International transfers
Cospire operates with a UK-India delivery model. Where personal data is transferred to India or any country outside the UK, we ensure an appropriate safeguard is in place. This will be one of the following:
- An adequacy decision made by the UK Secretary of State under the UK GDPR
- Standard contractual clauses approved for use under the UK GDPR (the UK International Data Transfer Agreement or Addendum)
- Any other mechanism permitted under the UK GDPR and the Data Protection Act 2018
At the time of writing, transfers to India are covered by standard contractual clauses. We will update this policy if the applicable transfer mechanism changes.
6. Your rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights in respect of your personal data:
- Right of access: you can request a copy of the personal data we hold about you (a subject access request).
- Right to rectification: you can ask us to correct inaccurate or incomplete personal data.
- Right to erasure: in certain circumstances, you can ask us to delete your personal data ("the right to be forgotten").
- Right to restrict processing: in certain circumstances, you can ask us to restrict the way we process your data.
- Right to data portability: where we process your data by automated means based on your consent or a contract, you can ask us to provide your data in a structured, commonly used and machine-readable format.
- Right to object: you have the right to object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
- Rights related to automated decision-making: you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects.
- Right to withdraw consent: where we process data on the basis of consent, you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, or to ask a question about how we process your data, please contact us at info@cospiretech.com.
We will respond to requests within one calendar month. If a request is complex or we receive a number of requests, we may extend this period by a further two months, in which case we will let you know within the first month.
7. Cookies
Our website uses cookies. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookie:
| Category | Examples | Purpose | Consent required? |
|---|---|---|---|
| Strictly necessary | Session cookie, CSRF token | Enable the website to function. Cannot be disabled. | No (exempt under PECR) |
| Analytics | _ga, _gid (Google Analytics) | Measure how visitors use the site to improve it. | Yes (opt-in required) |
| Functional | Calendly, form memory | Remember your preferences across sessions. | Yes (opt-in required) |
| Marketing | [To be confirmed if used] | Track visits for advertising purposes. | Yes (opt-in required) |
You can manage your cookie preferences at any time using the cookie consent banner on our website. You can also control cookies through your browser settings, though this may affect the functionality of the site.
8. How we keep your data secure
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:
- Use of HTTPS encryption for all website traffic
- Access controls limiting personal data access to team members who need it to do their job
- Use of reputable, security-certified third-party processors
- Regular review of data held and deletion of data that is no longer required
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it, and will notify affected individuals where required.
9. Links to other websites
Our website may contain links to third-party websites. This privacy policy applies only to cospire.co.uk. We are not responsible for the privacy practices of other sites and recommend that you read their privacy policies before submitting any personal data.
10. Changes to this policy
We may update this privacy policy from time to time. When we make material changes, we will update the "last updated" date at the top of this page. We recommend checking this page periodically to stay informed of how we protect your data.
11. How to make a complaint
If you are unhappy with how we have handled your personal data, please contact us at info@cospiretech.com and we will do our best to resolve the issue.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF