Privacy policy

Who is responsible

Cigma Consultants Ltd is responsible for personal information collected through this website. Contact us at info@cigmaconsultants.com about privacy, your information or a complaint.

When you contact us

We collect your name, email address, the subject and message you submit, and any company name or phone number you choose to add. Required fields are marked on the form. We need enough information to understand and respond to your enquiry; optional details help us respond in the way you prefer.

Your enquiry is saved in our protected enquiry system and a copy is sent to our business email inbox. Access is limited to people who need it to respond or manage the business relationship. Sending an enquiry does not sign you up for marketing.

We rely on our legitimate interests in answering business enquiries and managing business relationships. Where you ask us to take steps towards a contract with you personally, we can also rely on those requested pre-contract steps. Please do not send passwords, bank details, health information or other sensitive information through the form.

Email updates you request

If you subscribe to our insights or separately ask for updates about a tool, we use your email address for that choice. We also keep the selected tool where relevant, the page and method of signup, the consent statement and privacy-notice version, and the record’s creation date as evidence of your request.

Our lawful basis for these updates is your consent. Completing an assessment or sending an enquiry does not subscribe you. You can withdraw consent at any time by emailing us to unsubscribe. Withdrawal does not affect the lawfulness of processing before you withdrew it.

Assessment answers stay in your browser

The free assessments calculate your result in the current page. Your answers and any idea you enter are not saved to our database or included in a tool-update signup. Restarting, leaving or reloading the page clears that assessment state. The result is general guidance, and is not used to make a decision about you with legal or similarly significant effects.

Security and website operation

Our website and security providers may process an IP address, browser details, requested pages, timestamps and fault information to deliver the site, prevent abuse and investigate security or service problems. We rely on our legitimate interests in operating a secure, reliable website. Access to records is restricted to authorised people and service providers.

The contact form uses an automatic verification challenge hosted by this website. Your browser completes the check before an enquiry is accepted. The short-lived challenge is held in page memory, uses no tracking cookies and is checked against the submitted details. We keep a verification reference with an accepted enquiry to help detect repeated submissions.

Fonts are served from this website. We do not use advertising trackers. See our cookie policy for storage details and controls.

Optional visitor analytics

With your consent, we measure visits, page views, successful enquiry submissions and assessment starts or completions to understand which content is useful and improve the website. Events contain a random session identifier, page path, time, referring website domain and simple campaign labels when available, together with the consent version and time. We do not include contact details, enquiry text, assessment answers, results or ideas, full URL query strings, or advertising click identifiers. Events are grouped using a random, short-lived session identifier.

Our lawful basis is your consent. Analytics is off until you agree. You can reject it without losing website features, or withdraw at any time by opening Cookie settings, switching Analytics off and selecting Save choices. Future measurement stops and the browser identifier is removed. Withdrawal does not affect processing before you withdrew consent or automatically delete existing reports. To discuss information already collected, contact us using the privacy email above.

Browser session identifiers are not reused after 30 minutes without measured activity or after 24 hours at the latest. Analytics reports are held in our website reporting service under its retention settings; contact us for the current server-retention arrangements or to make a data request.

Who processes information

We use website hosting, database, website-reporting, network-security and business-email service providers to store enquiries and subscription records, deliver the website and handle correspondence. They receive only the information needed for their service. We do not sell personal information. We may also disclose information where required by law or needed to establish, exercise or defend a legal claim.

Service providers may process information outside the UK. A restricted international transfer must be covered by a UK adequacy decision or appropriate safeguards, such as UK-approved contractual transfer terms. Contact us for the providers and processing locations relevant to your information, the applicable transfer arrangements, or a copy of the safeguards.

How long information is kept

Enquiry records and email correspondence are kept while we respond, carry out requested follow-up or manage a resulting business relationship. Any continued retention is based on the need to meet a legal obligation, resolve an outstanding complaint or dispute, or establish or defend a legal claim. Information no longer needed for those purposes should be deleted.

Email subscription records are used while the subscription remains active or until the relevant mailing list or tool updates are discontinued. After withdrawal, a minimal record of your email address, withdrawal and consent history may be retained to respect your choice and demonstrate how the request was handled; it must not be used for marketing.

Security and fault records are kept for the period needed to investigate abuse, incidents or service problems under the relevant provider’s retention schedule. Backup copies follow the provider’s backup cycle and are restricted from ordinary use. Contact us for the retention arrangements that apply to a particular record or request.

Your rights and choices

You can ask for a copy of your information, correction of inaccurate information, deletion or restriction of its use. You can object to processing based on legitimate interests, and may have a right to receive or transfer information in a portable format where the law provides it. These rights depend on the circumstances and the lawful basis used.

You can object to direct marketing at any time. Use this email link to unsubscribe or tell us in a reply. We will stop the relevant marketing and record your choice.

For any privacy request, email info@cigmaconsultants.com. We may need enough information to confirm your identity and locate the records, but will not ask for more than necessary. We normally respond within one month and will explain any lawful extension.

You can raise a concern with us or complain to the Information Commissioner’s Office, the UK data-protection regulator.

Changes to this notice

This notice covers the business website and its forms. We update it when the way we use information changes; the date above identifies the current version. Client work may have additional data-handling terms in the relevant agreement.