1. Who We Are

CaseReady Document Prep, a trading style of ECU Consultancy Limited ("we", "us", "our",) operates https://caseready.co.uk and acts as a data controller for the purposes of UK data protection law.

2. Scope

This policy applies to personal data submitted through this website or otherwise provided when contacting us.

3. Data We Process

We process only data necessary to operate the website and respond to enquiries, including:

• Name
• Email address
• Message content or submitted form data
• Technical data (e.g. IP address, basic request metadata)

We do not intentionally collect special category data.

4. How Data Is Handled 

We are designed to minimise data retention:

• Data submitted via the website is processed transiently in memory to handle your request
• We do not maintain a database of user personal data from website submissions

However, limited and unavoidable storage may occur in:

• Email systems (if you contact us or we respond)
• Server logs and security systems
• Infrastructure operated by service providers

5. Purposes of Processing

We process data strictly to:

• Respond to enquiries
• Deliver requested information or services
• Maintain and secure the website
• Fulfil legal and financial obligations, including billing, invoicing, and accounting

We do not use personal data for profiling, automated decision-making, or marketing.

6. Legal Basis

Under UK GDPR, our lawful bases are:

• Legitimate interests — operating and securing the website, responding to enquiries
• Consent — where you voluntarily submit information

7. Data Sharing and Processors

We use a minimal number of third-party processors strictly as required to operate the service, which may include:

• Hosting and infrastructure providers
• Email delivery providers
• Security and logging services
• Accounting and bookkeeping software providers (for invoicing, tax, and financial record-keeping), specifically Xero

These providers process data under contractual obligations and only on our instructions.

We do not sell, rent, or trade personal data.

8. International Transfers

Some service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards (such as adequacy regulations or standard contractual clauses).

9. Data Retention

We do not retain personal data from website submissions.

However, where personal data is required for billing, invoicing, and legal accounting obligations, it will be retained within accounting systems for the period required by UK law (typically 6 years for tax and financial records).

Where data is stored indirectly (e.g. email or logs), it is retained only for as long as necessary for:

• Communication
• Security
• Legal obligations

10. Your Rights

You have rights under UK GDPR, including:

• Access to your personal data
• Correction of inaccurate data
• Erasure ("right to be forgotten")
• Restriction or objection to processing

To exercise your rights, contact: eve@caseready.co.uk 

11. Cookies

We use only strictly necessary cookies required for website operation.

We do not use tracking, advertising, or analytics cookies unless explicitly implemented with user consent.

12. Security

We implement appropriate technical and organisational measures to reduce the risk of unauthorised access, loss, or misuse of data. However, no system is completely secure.

13. Third-Party Links

This website may contain links to third-party sites. We are not responsible for their privacy practices.

14. Changes to This Policy

We may update this policy periodically. The latest version will always be published on this page.

15. Contact

For any privacy-related enquiries email:  eve@caseready.co.uk