Privacy Policy

1. Who is responsible for your data

The data controller for this website is CETU registered legal name, registered office address, country of registration and company number.

For any question about this policy or your personal data, contact add data-protection contact email.

If CETU has an establishment in the EU, or appoints an EU representative under GDPR Article 27, name them here. A controller outside the EU that offers goods or services to people in the EU generally needs one.

2. What we collect, and why

When you write to us

This website has no contact form. The contact page lists our email addresses, so writing to us is an ordinary email to our inbox. We receive whatever you choose to put in that message, which is usually your name, your company and what you are looking for.

We use it to answer you and to carry on the resulting business conversation. Our legal basis is legitimate interest (GDPR Art. 6(1)(f)). You wrote to us about a commercial matter and expect a reply.

Server logs

Our hosting provider records standard technical information, including IP address, timestamp, page requested and browser type, for security and to keep the site running. Confirm your host's log retention period and state it here.

3. What we do not do

As this site is currently built:

• It sets no cookies of any kind.
• It runs no analytics and no advertising or tracking pixels.
• Fonts are served from our own domain rather than a third-party CDN, so loading a page does not disclose your IP address to Google or any other font provider.
• We do not sell, rent or trade personal data, and we do not profile you.

If any of this changes, most likely by adding analytics, this policy must be updated first, and consent collected where the law requires it.

4. Who else sees your data

We share personal data only with providers who help us operate the site:

Website hosting

Name your host, e.g. Netlify, and the country where it stores data.

Email

Name your email provider, for example Google Workspace or Fastmail, and where it stores data.

Each acts as a processor on our instructions under a data-processing agreement. We may also disclose data where the law requires it.

5. Transfers outside the EEA

Important: complete this section accurately. Several common hosting and email providers are based in the United States. Where a provider stores or accesses data outside the European Economic Area, name the country and the safeguard relied on: typically an adequacy decision, the EU/US Data Privacy Framework, or Standard Contractual Clauses. CETU also operates between India and Europe, so transfers to India need to be covered here too.

6. How long we keep it

• Correspondence: for the duration of the conversation and state a period, e.g. 24 months afterwards, so we can pick a discussion back up.
• Contract and trade records: for as long as commercial, customs and tax law requires. Confirm the retention period that applies to you.

7. Your rights

If the GDPR applies to you, you have the right to:

• ask what personal data we hold about you, and get a copy;
• have inaccurate data corrected;
• have your data erased where there is no overriding reason to keep it;
• ask us to restrict how we use it;
• object to processing based on legitimate interest;
• receive your data in a portable format;

Write to add data-protection contact email and we will respond within one month. If you are not satisfied, you may complain to your national data-protection authority. In the EU, that is the one where you live or work.

8. Security

The site is served over HTTPS. Access to enquiry data is limited to the people at CETU who need it to reply to you. No website can promise perfect security, but we take reasonable technical and organisational measures to protect your data.

9. Changes to this policy

If we change how we handle personal data we will update this page and revise the date at the top.