Privacy policy

Last updated: October 2025

1. Introduction

Welcome to CBCO (“we”, “our”, “us”).
We are an eCommerce consultancy based in the United Kingdom, helping businesses optimise their online sales, digital presence, and marketing strategies.

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit www.cbco.uk (the “Site”), contact us, or engage our consultancy services.

We handle all personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect and process the following types of information:

A. Information You Provide to Us

  • Name, business name, and job title.

  • Contact information (email address, phone number, business address).

  • Project or service enquiries, including information shared via our contact forms or consultations.

  • Payment details (if you purchase services directly through our Site).

B. Information Collected Automatically

When you browse our website, we may collect:

  • IP address and general location (city or region).

  • Browser type, device information, and operating system.

  • Pages visited, time spent on the Site, and referral sources.

This data is collected via cookies and analytics tools such as Google Analytics to help us understand visitor behaviour and improve our website and services.

3. How We Use Your Information

We may use your personal data for the following purposes:

  • To respond to your enquiries and provide consultancy services.

  • To prepare proposals, contracts, and invoices.

  • To send updates, insights, or marketing materials (only if you’ve opted in).

  • To improve our website, services, and customer experience.

  • To meet legal, regulatory, or tax obligations.

We will only use your data for the purpose it was collected, unless we reasonably consider that we need to use it for another compatible reason.

4. Legal Basis for Processing

We rely on the following lawful bases for processing your personal data:

  • Consent – where you’ve opted in to receive communications.

  • Contractual necessity – to perform our agreement with you or take steps before entering one.

  • Legitimate interests – to operate, market, and improve our services responsibly.

  • Legal obligations – to comply with applicable laws and regulations.

5. Data Sharing

We may share your personal information with:

  • Trusted third-party service providers (e.g., website hosting, analytics, email marketing, and invoicing platforms).

  • Professional advisors such as accountants or legal consultants when necessary.

We ensure that all third parties respect the confidentiality of your data and act in accordance with UK data protection laws.

We will never sell, rent, or trade your personal data.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes it was collected for, including for legal, accounting, or reporting requirements.
For example:

  • Enquiry and client data: up to 7 years after the end of a project.

  • Marketing data: until you withdraw consent or unsubscribe.

7. Data Security

We use secure systems, encryption, and access controls to protect your information from unauthorised access, disclosure, alteration, or destruction.
Only authorised team members or partners who need to access data for legitimate purposes are permitted to do so.

8. Cookies and Analytics

Our website uses cookies to enhance your browsing experience and analyse website traffic.
Cookies are small text files stored on your device. You can manage or disable them through your browser settings.

We use tools such as Google Analytics to collect anonymised website data, which helps us understand visitor trends and improve our content and services.

For more details, see our Cookie Policy (if applicable).

9. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • The right to access your data.

  • The right to correct inaccurate or incomplete data.

  • The right to request deletion of your data (“right to be forgotten”).

  • The right to object to or restrict processing.

  • The right to data portability.

  • The right to withdraw consent at any time.

If you wish to exercise any of these rights, please contact us using the details below.

10. International Data Transfers

We primarily store and process data within the United Kingdom.
If we transfer data outside the UK (for example, to cloud-based platforms), we ensure that appropriate safeguards are in place in line with UK data protection standards.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

CBCO
📧 Email: info@cbco.uk
🌐 Website: www.cbco.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we handle data.
Any updates will be posted on this page with an updated “Last updated” date.