Cymbalstream Solutions Limited
Last updated: [Insert date]
Cymbalstream Solutions Limited (“Cymbalstream”, “we”, “us”, or “our”) is committed to protecting your privacy and handling your personal data responsibly.
This Privacy Policy explains how we collect, use, store, and protect personal data when you visit cymbalstream.com, contact us through our website, or sign up to receive our newsletter.
1. Who we are
Cymbalstream Solutions Limited is the data controller for the personal data collected through this website.
Company name: Cymbalstream Solutions Limited
Website: cymbalstream.com
Email: info@cymbalstream.com
If you have any questions about this Privacy Policy or how we use your personal data, please contact us at info@cymbalstream.com.
2. Who this policy applies to
This Privacy Policy applies to visitors to our website and people who contact us or subscribe to our newsletter through the website.
Our website is intended for business users and is not directed at children.
3. The personal data we collect
We may collect and process the following categories of personal data:
Information you provide directly
When you contact us through our website or sign up to our newsletter, we may collect:
- your name
- company name, where provided
- email address
- phone number, where provided
- subject line and message content
- marketing preferences, including whether you opted in to receive our newsletter
Information collected automatically
When you use our website, we may automatically collect certain technical and usage information, such as:
- IP address
- browser type and version
- device information
- pages visited
- date and time of visits
- referral source
- approximate location data
- website usage and interaction data collected through analytics cookies
4. How we use your personal data
We use personal data for the following purposes:
- to respond to inquiries submitted through our website
- to communicate with you about our services
- to send newsletters and marketing communications where you have opted in
- to operate, maintain, and secure our website
- to detect and prevent spam, fraud, and abuse
- to analyze website traffic and performance
- to improve our website, services, and user experience
- to comply with legal or regulatory obligations
5. Lawful bases for processing
We rely on the following lawful bases under UK GDPR:
Legitimate interests
We process personal data where necessary for our legitimate interests, including:
- responding to business inquiries
- operating and securing our website
- improving our website and services
- preventing spam and abuse
Consent
We rely on your consent:
- where you choose to subscribe to our newsletter
- where non-essential cookies are used, where applicable
You can withdraw your consent at any time.
Legal obligation
We may process personal data where necessary to comply with applicable legal obligations.
6. Newsletter and marketing communications
If you sign up to receive our newsletter, we will use your contact details to send you updates, insights, and marketing communications related to our services.
You can unsubscribe at any time by:
- clicking the unsubscribe link in any marketing email, or
- contacting us at info@cymbalstream.com
We use Mailchimp to manage newsletter subscriptions and email marketing.
7. Third-party service providers
We use trusted third-party providers to help operate our website and services. These may process personal data on our behalf, including:
- website hosting providers based in the United Kingdom
- Google Analytics 4 for website analytics
- Google reCAPTCHA to protect our forms from spam and abuse
- Mailchimp for newsletter sign-up and email marketing
- Brevo for SMTP email delivery
These providers may process personal data only as needed to provide their services to us, subject to their own terms and data protection commitments. Google Analytics can collect default analytics data such as user counts, session statistics, approximate geolocation, and browser and device information, and GA4 allows retention settings including 2 months or 14 months for user-level data.
Google reCAPTCHA is used to help protect forms and prevent automated abuse.
Mailchimp provides GDPR-related tools and terms, including a data processing addendum. Brevo also publishes GDPR and privacy documentation relevant to its services.
8. International transfers
Some of our third-party service providers may process personal data outside the United Kingdom.
Where personal data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place, such as contractual protections or other lawful transfer mechanisms.
9. Data retention
We keep personal data only for as long as necessary for the purposes for which it was collected.
Our standard retention periods are:
- contact form inquiries: up to 12 months after the last meaningful contact
- newsletter subscriber data: until you unsubscribe or ask us to delete it, with periodic review of inactive contacts
- server logs: up to 30 days
- Google Analytics data: up to 14 months, where configured
The ICO requires organizations to avoid keeping personal data longer than necessary, and GA4 supports configurable retention periods including 14 months.
10. How we protect personal data
We use reasonable technical and organizational measures to help protect personal data against unauthorized access, loss, misuse, or disclosure.
However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
11. Your rights
Under UK data protection law, you may have the right to:
- request access to your personal data
- request correction of inaccurate personal data
- request deletion of your personal data
- request restriction of processing
- object to certain processing
- request transfer of your personal data, where applicable
- withdraw consent where processing is based on consent
To exercise any of these rights, please contact us at info@cymbalstream.com.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.
12. Links to other websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read their privacy notices.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, or legal obligations.
Any updates will be posted on this page with a revised “Last updated” date.