Privacy Policy

1. Introduction

CCI Group (Capital Care Investment) Ltd (“CCI Group”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website at cci-group.co.uk (the “Site”) and use our services.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect the following types of personal data:

2.1 Information You Provide

• Account registration: name, email address, phone number, organisation, and password (stored securely hashed).
• Contact forms: name, email address, phone number, company name, enquiry type, and your message.
• Newsletter subscription: email address and optionally your name.
• Profile updates: name, email, and profile picture.

2.2 Information Collected Automatically

• Usage data: pages visited, time spent on pages, referral sources, and navigation patterns.
• Device data: browser type, operating system, screen resolution, and device identifiers.
• Network data: IP address and approximate geographic location.

3. How We Use Your Data

We use your personal data for the following purposes:

• Account management: to create and manage your account, authenticate your identity, and provide access to platform features.
• Communication: to respond to your enquiries, send service-related notifications, and provide customer support.
• Newsletter: to send you property investment insights and updates (only with your consent).
• Site improvement: to analyse usage patterns, diagnose technical issues, and improve the Site’s functionality and user experience.
• Security: to detect and prevent fraud, unauthorised access, and other malicious activities.
• Legal compliance: to comply with applicable laws, regulations, and legal processes.

4. Legal Basis for Processing

We process your personal data on the following legal bases under the UK GDPR:

• Consent: where you have given clear consent for us to process your data for a specific purpose (e.g., newsletter subscription).
• Contract: where processing is necessary for the performance of a contract with you (e.g., account services).
• Legitimate interests: where processing is necessary for our legitimate interests (e.g., site security, analytics) and your rights do not override those interests.
• Legal obligation: where processing is necessary to comply with a legal obligation.

5. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data with:

• Service providers: trusted third parties who assist us in operating the Site, hosting data, or providing services on our behalf, subject to confidentiality agreements.
• Legal authorities: when required by law, regulation, court order, or governmental request.
• Business transfers: in connection with a merger, acquisition, or sale of all or part of our assets, your data may be transferred as part of that transaction.

6. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of passwords using industry-standard hashing algorithms (bcrypt).
• Secure HTTPS connections for all data transmission.
• Role-based access controls limiting data access to authorised personnel only.
• Regular security reviews and updates to our systems.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Account data: retained for the duration of your account and for up to 12 months after account deletion.
• Contact submissions: retained for up to 24 months after submission.
• Newsletter subscriptions: retained until you unsubscribe.

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data (“right to be forgotten”).
• Right to restrict processing: request that we limit how we use your data.
• Right to data portability: request your data in a structured, machine-readable format.
• Right to object: object to the processing of your data for certain purposes.
• Right to withdraw consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Cookies

The Site uses essential cookies required for authentication and security purposes. These cookies are strictly necessary for the operation of the Site and do not require your consent under UK law.

We do not currently use advertising or tracking cookies. If this changes, we will update this policy and seek your consent where required.

10. Children’s Privacy

The Site is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

11. International Transfers

Your personal data is processed and stored within the United Kingdom. If we transfer your data outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements, such as standard contractual clauses or adequacy decisions.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically to stay informed about how we are protecting your data.

13. Contact & Complaints

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

CCI Group (Capital Care Investment) Ltd
Email: [email protected]
Phone: +44 20 3322 6496

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated. The ICO can be contacted at ico.org.uk.