Custodia Continuity

Privacy Policy

How we handle your data.

Data Controller

Custodia Continuity Ltd is the data controller for personal data collected through this website and our services. Our registered offices are at The Blacksmiths, The Dale, Wirksworth, Derbyshire DE4 4EJ.

For any data protection enquiries, contact us at sayhello@custodiauk.com or call 01629 369 250.

What We Collect

We collect personal data only where necessary to provide our services:

  • Contact information — name, email address, telephone number, business name and address, provided when you contact us or become a client
  • Service delivery data — technical information necessary to provide managed security, backup, compliance and other services under contract
  • Website usage data — truly anonymous server logs including IP address, browser type and pages visited, retained for security monitoring purposes only, not to track you, and always private

We do not collect any information we do not need. We do not use tracking cookies, analytics platforms or third-party advertising tools on this website.

Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Contract — processing necessary to deliver services you have engaged us to provide
  • Legitimate interest — processing necessary for security monitoring, fraud prevention and the proper operation of our business
  • Legal obligation — processing required to comply with UK law, including financial record-keeping and regulatory requirements

How We Use Your Data

Your data is used solely for the purposes of providing our services to you. Specifically:

  • To deliver the managed security, backup, continuity, compliance, training and software services you have contracted
  • To communicate with you about your services, including incident notifications and service updates
  • To maintain accurate financial records as required by UK law
  • To monitor and protect the security of our own systems and infrastructure

We will never use your data for marketing purposes without your explicit consent. We will never sell, rent or share your data with third parties for their own purposes.

Third-Party Data Sharing

We share personal data with third parties only where strictly necessary to deliver our services:

  • Certification bodies — where you have engaged us to manage Cyber Essentials or other certifications on your behalf
  • Infrastructure providers — our backup and security infrastructure runs on privately owned hardware; where cloud services are used, data is processed within the UK or EEA under appropriate safeguards
  • Professional advisors — our accountants and insurers, under their own data protection obligations

We do not use third-party data processors for marketing, analytics or advertising.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected:

  • Client data — retained for the duration of the service contract and for six years afterwards, as required for financial and legal record-keeping
  • Enquiry data — retained for up to 12 months if no service engagement follows
  • Server logs — retained for up to 90 days for security monitoring purposes

Data Security

We apply the same security standards to our own data handling that we implement for our clients. Personal data is stored on encrypted systems, access is restricted to authorised personnel only, and all systems are subject to the same monitoring and controls we provide as a managed security service.

Your Rights

Under UK data protection law, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate or incomplete data
  • Erasure — request deletion of your data where there is no ongoing lawful basis to retain it
  • Restriction — request that we limit how we use your data
  • Portability — receive your data in a structured, commonly used format
  • Objection — object to processing based on legitimate interest

To exercise any of these rights, contact us at sayhello@custodiauk.com. We will respond within one month.

Cookies

This website does not use tracking cookies, third-party analytics or advertising cookies. Session cookies may be used where strictly necessary for the functioning of the website. These are deleted when you close your browser.

Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to This Policy

This policy was last updated in April 2026. We will update it as necessary to reflect changes in our practices or in UK data protection law.