Legal
Privacy Policy
Last updated: 28 June 2026
1. Who we are
Cicely Access Ltd ("Cicely", "we", "us") is the data controller for personal data collected through this website and our services. We are registered in England and Wales.
We are registered with the Information Commissioner's Office (ICO) as a data controller under the Data Protection (Charges and Information) Regulations 2018, as amended by the Data Protection (Charges and Information) (Amendment) Regulations 2025. ICO Registration Reference: ZC138898.
Contact us about data matters at: hello@withcicely.com
2. What data we collect
We may collect the following categories of personal data:
- Contact data — name, email address, organisation, and location provided when you use our contact form.
- Communication preferences — access needs and communication preferences you choose to share with us.
- Usage data — pages visited, time on site, and referring URL, collected via server logs and analytics tools.
- Cookie data — see section 7 below.
We do not collect sensitive personal data (such as health information or biometric data) unless you choose to share it in the free-text fields of our contact form.
3. How we use your data
We use your personal data to:
- Respond to your enquiries and provide the services you request.
- Communicate with you about our work, where you have asked us to.
- Improve our website and services through aggregated analytics.
- Comply with our legal obligations.
4. Legal basis for processing
Under UK GDPR, we rely on the following lawful bases:
- Contract — processing necessary to respond to your enquiry or deliver a service you have requested.
- Legitimate interests — improving our website and understanding how it is used, where this does not override your rights.
- Consent — where we have asked for and received your explicit consent (for example, optional marketing communications).
- Legal obligation — where processing is required to comply with applicable law.
5. Who we share data with
We do not sell your personal data. We may share it with:
- Service providers acting as processors on our behalf (for example, hosting, email, and analytics providers) under data processing agreements.
- Legal and regulatory authorities where required by law.
We use Google Analytics 4 (provided by Google LLC) to understand website usage. Google may process data in the United States under the UK Extension to the EU-US Data Privacy Framework. Analytics only runs after you consent via our cookie banner, and IP addresses are anonymised before storage. You can withdraw consent at any time by clearing this site's cookies in your browser.
Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR Chapter V.
6. How long we keep your data
We retain personal data only for as long as necessary for the purpose it was collected. Enquiry data is retained for up to 3 years after our last contact with you. Analytics data is retained in aggregated, anonymised form.
7. Cookies
We use strictly necessary cookies to make our website function. We may also use analytics cookies to understand usage. Where analytics cookies are used, we ask for your consent before setting them.
You can control cookies through your browser settings. Disabling cookies may affect the functionality of this website.
8. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data in certain circumstances.
- Restrict processing of your data.
- Data portability — receive your data in a structured, machine-readable format.
- Object to processing based on legitimate interests.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact us at hello@withcicely.com. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Changes to this policy
We may update this policy from time to time. The date at the top of this page will reflect any changes. Continued use of our website after an update constitutes acceptance of the revised policy.