Privacy Policy

1. Introduction

Casta Soddi Limited ("we", "our", or "us") is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal information when you visit our website at www.castasoddi.com or use our services.

We are registered in England and Wales under company number [Company Number] and our registered office is at 123 Marketing Street, London, SW1A 1AA, United Kingdom. For the purposes of the UK GDPR and Data Protection Act 2018, we are the data controller.

2. Information We Collect

Personal Information You Provide

We may collect the following personal information when you:

• Complete our contact form or enquiry forms
• Subscribe to our newsletter or marketing communications
• Enrol in our courses or training programmes
• Contact us via phone, email, or other means

This information may include:

• Name and contact details (email address, phone number, postal address)
• Company name and job title
• Information about your business and marketing needs
• Payment and billing information (when purchasing our services)
• Communications between you and us

Automatically Collected Information

When you visit our website, we automatically collect:

• Technical information about your device and internet connection
• Information about your visit, including pages viewed and time spent
• Location data (general geographic location based on IP address)
• Cookie and similar technology data (see our Cookie Policy for details)

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To provide our marketing training courses and education services
• Communication: To respond to your enquiries and provide customer support
• Marketing: To send you information about our courses and services (with your consent)
• Improvement: To improve our website, services, and customer experience
• Legal Compliance: To comply with legal obligations and protect our legitimate interests

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Consent: Where you have given specific consent for marketing communications
• Contract: Where processing is necessary to provide our services to you
• Legitimate Interest: Where we have legitimate business reasons and your rights are protected
• Legal Obligation: Where we are required by law to process your information

5. Information Sharing

We may share your personal information with:

• Service Providers: Third-party companies that help us deliver our services (e.g., payment processors, email marketing platforms)
• Professional Advisors: Lawyers, accountants, and other professional advisors
• Legal Authorities: When required by law or to protect our rights

We do not sell your personal information to third parties. All service providers are contractually bound to protect your data and use it only for specified purposes.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, or resolve disputes. Typically, we retain customer data for up to 7 years after the end of our business relationship, in line with UK tax and accounting requirements.

7. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Request limitation of processing your data
• Portability: Request transfer of your data to another service
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, contact us at [email protected] or use the contact details below.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, access controls, and staff training.

9. International Transfers

We primarily process data within the UK. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the UK authorities.

10. Cookies

Our website uses cookies and similar technologies. For detailed information about our cookie practices, please see our Cookie Policy.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "last updated" date. For significant changes, we may notify you via email or prominent website notice.

12. Contact Us

If you have questions about this privacy policy or our data practices, contact us:

13. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority: