Last updated: 7 August 2026
This policy explains what we do with personal data when you visit cescales.uk, contact us, or become a client. It also explains your rights and how to exercise them.
We are a small business and we collect very little. Nothing on this site is sold, rented, or shared for anyone else's advertising.
1. Who we are
CEScales is the trading name of Carl Sarvan.
- Address: College Road, The Brigue, Taunton TA2 6LX
- Email: info@cescales.uk
We are the data controller for the personal data described in this policy. That means we decide why and how it is used.
Where we run advertising campaigns for a client, that client is the controller of their own customer data and we act as their processor. This policy does not cover that — it is governed by our agreement with the client.
2. What we collect, and why
When you contact us
If you fill in a form, email us, or book a call, we collect the details you give us — typically your name, email address, business name, website, phone number, and whatever you tell us about your business.
- Why: to answer you, prepare a proposal, and decide whether we can help.
- Legal basis: our legitimate interests in responding to enquiries and running our business, and where you are asking us to prepare a contract, taking steps at your request before entering one.
When you become a client
We collect the information needed to provide the service and to run our business properly: contact details, billing details, advertising account access, and campaign data.
- Why: to perform our contract with you, and to meet our legal obligations on tax and record keeping.
- Legal basis: performance of a contract, and legal obligation.
When you visit the site
Our hosting provider records standard technical information — IP address, browser type, pages viewed, and the time of the visit — as part of keeping the site running and secure.
- Why: security, troubleshooting, and preventing abuse.
- Legal basis: our legitimate interests in operating a secure website.
Analytics
We use Vercel Web Analytics to see how many people visit and which pages they read. It is cookieless: it stores nothing on your device, does not follow you across other websites, and does not build a profile of you. We see totals, not individuals.
- Legal basis: our legitimate interests in understanding whether our website works. Because nothing is stored on or read from your device, this does not require consent.
Cookies
We ask for your cookie choice the first time you visit. Only a strictly necessary cookie is set automatically — it remembers that choice so we do not ask again. Measurement cookies are set only if you accept them, and you can change your mind at any time from the "Cookie settings" link in the footer.
- Legal basis: consent for anything beyond strictly necessary (PECR regulation 6, and consent under the UK GDPR for the resulting processing). Full detail, including cookie names and lifetimes, is in our Cookie Policy.
3. What we do not do
- We do not sell, rent, or trade personal data.
- We do not use the personal data of people who contact us to build advertising audiences.
- We do not make automated decisions that produce legal or similarly significant effects.
- We do not knowingly collect data from children. This site and our services are for businesses.
4. Who we share it with
We share personal data only with the suppliers we need to run the business, and only what they need:
| Who | What for |
|---|---|
| Vercel Inc. | Hosting the website, and cookieless visitor analytics |
| Web3Forms | Delivering contact-form submissions to our inbox |
| Google (Google Workspace / Gmail) | Sending, receiving and storing our email |
| Cloudflare | DNS for cescales.uk, and network security |
| Our accountant or tax adviser | Preparing and filing tax returns |
We may also disclose personal data where we are required to by law, or to establish or defend legal claims.
5. Transfers outside the UK
Some of our suppliers are based outside the UK, or store data outside it. Where personal data is transferred out of the UK, we rely on either an adequacy decision covering the destination country, or the UK International Data Transfer Agreement or Addendum, so that your data keeps an equivalent level of protection.
You can ask us which suppliers this applies to and what safeguards are in place — see section 8.
6. How long we keep it
| Data | Kept for |
|---|---|
| Enquiries that do not become clients | Up to 12 months from your last contact with us |
| Client records, contracts and correspondence | 6 years from the end of the engagement |
| Invoices, receipts and accounting records | At least 5 years after the 31 January filing deadline for the relevant tax year, as HMRC requires |
| Website technical logs | A short rolling period set by our hosting provider |
We delete or anonymise personal data once we no longer need it.
7. Your rights
Under the UK GDPR you have the right to:
- Access — get a copy of the personal data we hold about you
- Rectification — have inaccurate data corrected
- Erasure — have data deleted, where there is no good reason for us to keep it
- Restriction — have us pause how we use it, in some circumstances
- Portability — receive certain data in a portable format
- Object — object to processing based on legitimate interests, including at any time
- Withdraw consent — where we rely on consent, at any time, without affecting what came before
There is normally no charge, and we will respond within one month.
To exercise any of these, email info@cescales.uk.
8. Complaints
If you are unhappy with how we have handled your data, please tell us first — info@cescales.uk — and we will try to put it right.
You also have the right to complain to the UK regulator:
Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Helpline: 0303 123 1113 · ico.org.uk/make-a-complaint
9. Changes to this policy
If we change this policy we will update the date at the top. If the change is significant, we will say so clearly on the site.