This policy explains how Citrinecom Limited collects and uses personal information when you visit our website, contact us, or do business with us. We take your privacy seriously and handle your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Citrinecom Limited is the controller of your personal information. We are a company registered in England and Wales, company number 17508745, with our registered office at 97 Smiths Lane, Windsor, SL4 5PE, United Kingdom.
Your contact for data protection matters is Hassib Massoumi, who represents the company. You can reach him about this policy or your information at hello@citrinecom.co.uk.
2. Information we collect
Information you give us. When you fill in our contact form or email us, we collect the details you provide. This can include your first and last name, email address, phone number, company name, job title, company website, country, the type of business you run, your areas of interest, and the content of your message.
Information from doing business together. If you become a supplier, partner or trade customer, we also hold the business contact details, order and invoice records, and correspondence needed to manage that relationship.
Technical information. When you visit the website, our hosting provider automatically processes technical data such as your IP address, browser type and the pages requested, so that the site can be delivered securely. We do not use this to identify you.
3. How we use your information
- To respond to your enquiry and continue the conversation you started.
- To assess and set up a supply, partnership or trade relationship.
- To manage orders, deliveries, invoices and payments with suppliers and trade customers.
- To keep the website secure and working properly, and to prevent spam and misuse.
- To meet our legal, tax and accounting obligations.
We do not sell your personal information, and we do not use it for automated decision-making.
4. Our lawful basis
- Legitimate interests: responding to enquiries, developing business relationships, and keeping our website secure.
- Contract: taking steps at your request before entering into a contract, and performing a contract with you or your organisation.
- Legal obligation: keeping records we are required to keep by law.
- Consent: where we ask for it. You can withdraw consent at any time by emailing us.
5. Who we share it with
We share personal information only with trusted service providers who process it on our behalf and under our instructions, such as:
- our website hosting provider (Vercel);
- our email delivery provider, which sends contact form messages to our inbox;
- our email and office software providers;
- our accountants and professional advisers, where needed.
We may also disclose information if required by law, or to protect our rights, property or safety.
6. International transfers
Some of our service providers are based in, or store data in, countries outside the UK, including the United States. Where this happens, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses, or the UK–US data bridge.
7. How long we keep it
- Enquiries that do not lead to a business relationship: up to 24 months after our last contact.
- Supplier, partner and trade customer records: for the length of the relationship and up to 6 years after it ends.
- Accounting and tax records: 6 years, as required by UK law.
After these periods we securely delete or anonymise the information.
8. Security
We use appropriate technical and organisational measures to protect your information, including encrypted connections (HTTPS) to this website and access controls on our systems. No method of transmission over the internet is completely secure, but we work to protect the information you share with us.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use your information;
- object to our use of your information based on legitimate interests;
- ask us to transfer your information to another organisation (data portability);
- withdraw your consent at any time, where we rely on consent.
To use any of these rights, email hello@citrinecom.co.uk. We will respond within one month. There is usually no charge.
10. Cookies
This website does not use advertising, tracking or analytics cookies, so we do not show a cookie banner. If we add any non-essential cookies in future, we will ask for your consent first and update this policy.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
12. Contact and complaints
If you have a question or concern about how we handle your information, please email hello@citrinecom.co.uk or write to Citrinecom Limited, 97 Smiths Lane, Windsor, SL4 5PE, United Kingdom.
If you live in the European Union, the EU General Data Protection Regulation also protects you, and you can complain to the data protection authority in your country. Our representative in the EU under Article 27 of the EU GDPR is Minna Massoumi, Frankfurt am Main, Germany, who you can contact at minna@citrinecom.co.uk. Versions of this policy written for visitors from Germany, France and Spain are available in German, French and Spanish.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113. We would appreciate the chance to address your concerns first.