Privacy Policy

Who we are

This site is operated by CMX Ventures Ltd (company number [COMPANY NUMBER], registered at [REGISTERED ADDRESS]), trading as CMX Business Engineering. We are the data controller for the personal data described here. Contact: [PRIVACY EMAIL].

What we collect and why

Edge Score submissions. If you request your full breakdown we collect your name, email address, company name, your nine diagnostic answers and the resulting scores. Lawful basis: consent, given when you submit the form. We use this to send your breakdown and to follow up once about the Edge Audit.

Contact and booking. If you send an enquiry or book an Audit we collect the details you provide (name, email, company, your message, and booking details handled by our scheduling provider). Lawful basis: legitimate interests in responding to your enquiry, and steps taken at your request prior to a contract.

The receptionist demo. The "talk to the receptionist" demonstration sends what you type to our AI provider to generate the reply, and nothing else. We do not store the conversation, we do not log its content, and the assistant is instructed to refuse personal details. Do not type real personal information into it; if you do, it is not kept. Lawful basis: legitimate interest in demonstrating the service.

Analytics. With your consent we use Google Analytics 4 to understand how the site is used, including conversion events such as completing the Edge Score. Analytics is off until you consent and you can decline without losing any functionality. Lawful basis: consent.

Where your data goes

Lead data is forwarded to the customer relationship system we use to manage enquiries, and nowhere else. Booking data is processed by our scheduling provider (Cal.com). We do not sell personal data, and we do not use it for third-party advertising.

How long we keep it

Enquiry and Edge Score data is kept for up to 24 months from last contact, then deleted. Data connected to a client engagement is kept for the duration of the engagement plus the retention periods required by UK tax and company law.

Your rights

Under UK GDPR you can request access to, correction of, or deletion of your personal data, object to or restrict processing, withdraw consent at any time, and request portability. Email [PRIVACY EMAIL] and we will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Cookies and consent

The site sets no marketing or analytics cookies until you consent through the consent control. Strictly necessary storage (such as remembering your consent choice) does not require consent.

Security

Data is transmitted over HTTPS, processed through access-controlled systems, and never embedded in client-side code. Submissions are validated and filtered server-side.