PRIVACY POLICY
How Cinderpath handles personal data
A practical account of what CINDERPATH LTD collects, why it is used, how long it is kept and the rights available to you.
On this page
Last updated
Who we are#
CINDERPATH LTD, trading as Cinderpath, is the controller for personal data covered by this notice.
- Company number
- 17100354
- Registered office
- Dept 2, 43 Owston Road, Carcroft, Doncaster, England, DN6 8DA
- Privacy email
- privacy@cinderpath.io
What this notice covers#
This notice covers personal data collected through cinderpath.io, direct enquiries and related business communications. It explains the purpose, legal basis, retention and rights for each use.
What we collect#
| Category | Examples | Source | Lawful basis | Retention |
|---|---|---|---|---|
| Contact submissions | Name, work email, company, website, topic, message and consent flag | You | Legitimate interests in responding; consent for message content you choose to provide | 24 months from last contact |
| Verdict email requests | Work email, the answers given in a service line check, and consent flag. Purpose: sending a requested verdict | You | Consent | The email thread only; nothing is stored on the website |
| Hosting and security logs | IP address and user agent | Your browser and network | Legitimate interests in protecting the site | Short retention held by the hosting provider |
| Consent record | Categories, timestamp and policy version | Your browser choice | Demonstrating consent and applying your instructions | 12 months |
What we do not do#
- We do not profile visitors.
- We do not make automated decisions with legal or similarly significant effect.
- We do not sell personal data or share it for advertising.
- We do not use advertising pixels or cross-site tracking.
- We do not use purchased contact lists.
Lawful bases by purpose#
- Replying to an enquiry
- Our legitimate interest is to read and answer a request sent to Cinderpath. Consent applies to message content a person chooses to include.
- Sending a requested verdict
- When you ask a service line check to email its verdict, we use your consent to send it to the address you give and a copy to our inbox. Nothing else is kept beyond that email thread.
- Protecting the site
- Our legitimate interest is to identify faults, abuse and security incidents in short-lived hosting logs.
- Recording consent
- We keep the necessary record to demonstrate and apply the visitor's choice under PECR and data protection law.
Who processes data for us#
| Name | Role | Processing location | Transfer mechanism |
|---|---|---|---|
| To be confirmed | Website hosting and security delivery | To be confirmed | To be confirmed before personal data is processed |
| To be confirmed | Email delivery | To be confirmed | To be confirmed before personal data is processed |
International transfers#
If a processor handles personal data outside the United Kingdom or European Economic Area, Cinderpath will put the required safeguards in place. Depending on the transfer, these may include the UK International Data Transfer Agreement or EU standard contractual clauses with the UK addendum. These are contracts that require the recipient to protect the data to an approved standard.
Your rights#
| Right | What it means in practice | How to exercise it | Identity check |
|---|---|---|---|
| Access | Receive a copy of your personal data and related information. | Email privacy@cinderpath.io | Information proportionate to the request, such as confirming the address used in earlier correspondence |
| Rectification | Correct incomplete or inaccurate personal data. | Email privacy@cinderpath.io | Information proportionate to the request, such as confirming the address used in earlier correspondence |
| Erasure | Ask us to delete data where no lawful reason requires its retention. | Email privacy@cinderpath.io | Information proportionate to the request, such as confirming the address used in earlier correspondence |
| Restriction | Pause a use of data while an issue is checked. | Email privacy@cinderpath.io | Information proportionate to the request, such as confirming the address used in earlier correspondence |
| Objection | Object to processing based on legitimate interests. | Email privacy@cinderpath.io | Information proportionate to the request, such as confirming the address used in earlier correspondence |
| Portability | Receive eligible data in a structured, machine-readable format. | Email privacy@cinderpath.io | Information proportionate to the request, such as confirming the address used in earlier correspondence |
| Automated decisions | Ask for human review where a qualifying automated decision applies. | Email privacy@cinderpath.io | Information proportionate to the request, such as confirming the address used in earlier correspondence |
| Withdraw consent | Withdraw consent at any time without affecting earlier lawful processing. | Email privacy@cinderpath.io | Information proportionate to the request, such as confirming the address used in earlier correspondence |
How to complain#
Contact privacy@cinderpath.io first if possible. In the UK, you may complain to the ICO. Visitors in the European Union may also complain to their national supervisory authority because Cinderpath works with European companies and EU GDPR under Article 3(2) may apply.
How we protect data#
We limit access to people and processors who need it, use access controls and encrypted transport, keep operational records, review suppliers, and remove data when its retention period ends. No internet service can guarantee absolute security.
Children#
This business website is not directed at children, and Cinderpath does not knowingly collect children's personal data.
Changes to this notice#
We update this notice when processing, suppliers or legal requirements change. A material change to browser storage also changes the consent policy version and asks visitors again.
How to contact us#
Email privacy@cinderpath.io for a data request. Write to CINDERPATH LTD at its registered office, Dept 2, 43 Owston Road, Carcroft, Doncaster, England, DN6 8DA. We respond within one month and may extend by a further two months for complex or numerous requests where the law permits.
Version history#
| Version | Date | Change |
|---|---|---|
| 1.0 | 2026-10-05 | Initial privacy notice published. |
| 1.1 | 2026-10-13 | Added verdict email requests from the service line checks. |
For data requests, email privacy@cinderpath.io.