Effective Date: 1^st April 2025

Cavill & Cruikshank Limited (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.

By using our website www.candcaccountants.co.uk (the “Site”), you agree to the collection and use of information in accordance with this policy.

Cavill & Cruikshank Limited is the Data Controller responsible for your personal data. If you have any questions about this Privacy Policy or your personal data, please contact us at:

• Email: info@candcaccountants.co.uk
• Phone: 01424 559030
• Address: 7 Henderson Close, Hastings, TN34 2DU

We may collect and process the following types of personal data:

• Name
• Email address
• Phone number
• Mailing address
• Payment details (if applicable)
• Any other information you provide through forms on our website

• IP address
• Browser type and version
• Device type
• Pages visited on the website
• Time and date of your visit
• Referring website or source
• Cookie and tracking information (for example, through Google Analytics)

We use your personal data for the following purposes:

• To provide and manage our website and services
• To process your payments or transactions
• To communicate with you, including sending newsletters or promotional materials (if you’ve opted in)
• To respond to your inquiries and provide customer support
• To improve our website and services, including analysing user activity
• To comply with legal obligations

Under the GDPR, we are required to have a legal basis for processing your personal data. We rely on the following legal bases:

• Consent: Where you have given us your consent to process your data for specific purposes (e.g., subscribing to our newsletter).
• Contractual necessity: Processing your data as required to fulfil a contract (e.g., processing payments or delivering services).
• Legitimate interests: Processing is necessary for our legitimate business interests, such as improving the user experience on our website or preventing fraud.
• Legal obligations: We may process your data when required to do so by law, such as for tax or regulatory compliance.

We will never sell your personal data to third parties. However, we may share your data in the following situations:

• Service Providers: We may share your personal data with third-party service providers (e.g., payment processors, email marketing platforms) who assist us in delivering our services.
• Legal Compliance: We may disclose your personal data if required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction.

All third parties with whom we share your personal data are required to handle your data in accordance with GDPR and relevant data protection laws.

We do not transfer your personal data outside the European Economic Area (EEA) unless it is to a country or organization that provides an adequate level of protection for personal data, as determined by the European Commission. If we do transfer your data outside the EEA, we will take appropriate measures to ensure that your data is treated securely and in accordance with GDPR.

We will only retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by law. After this period, your data will be securely deleted or anonymized.

As a data subject, you have the following rights under the GDPR:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You can request the deletion of your personal data under certain circumstances.
• Right to Restrict Processing: You can request that we restrict the processing of your personal data under certain conditions.
• Right to Data Portability: You can request that we provide your personal data in a structured, commonly used, and machine-readable format, and transfer it to another controller if technically feasible.
• Right to Object: You can object to the processing of your personal data in certain situations, including direct marketing.
• Right to Withdraw Consent: If we are relying on your consent to process your personal data, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at info@candcaccountants.co.uk.

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us:

• Remember your preferences
• Improve functionality
• Analyse traffic and usage patterns

You can manage your cookie preferences through your browser settings. However, please note that blocking or deleting cookies may impact the functionality of the website.

For more information about our use of cookies, please see our Cookie Policy .

We implement appropriate technical and organizational measures to safeguard your personal data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee the absolute security of your data.

Our website may contain links to third-party websites that are not controlled by us. We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the “Effective Date” will be updated accordingly. We recommend that you review this Privacy Policy periodically for any updates.

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:

• Email: info@candcaccountants.co.uk
• Phone: 01424 559030
• Address: 7 Henderson Close, Hastings, TN34 2DU

Cavill & Cavill Limited values your privacy and is committed to ensuring that your personal data is handled responsibly and securely.