Privacy Policy

1. Who we are

Cenxen is a product operated by Childsey Ltd, a company registered in England and Wales.

Company name: Childsey Ltd

Company number: 12592634

Registered address: Nantwich Court, 5A Hospital Street, Nantwich, Cheshire, England, CW5 5RH

Trading name for this product: Cenxen

Data protection contact: Simon Childs

Email: simon@childsey.com

When this policy refers to "Cenxen", "we", "us", or "our", it means Childsey Ltd operating the Cenxen platform.

We are the data controller for the personal data described in this policy. This means we decide how and why your data is processed.

2. What this policy covers

This privacy policy explains how we collect, use, store, and share your personal data when you use the Cenxen website and platform at cenxen.com.

It also explains your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR) where applicable.

Please read this policy carefully. By using Cenxen, you confirm that you have read and understood how we handle your personal data.

3. Who can use Cenxen

Cenxen is a business-to-business platform intended for use by individuals aged 18 or over. We do not knowingly collect or process personal data from anyone under the age of 18. If you are under 18, please do not use this platform or provide us with any personal data.

If we become aware that we have collected data from someone under 18, we will delete it without delay. If you believe this has happened, please contact us at simon@childsey.com.

4. What personal data we collect

4.1 Data you give us directly

When you register for an account, purchase a plan, or contact us, we collect:

• Your name
• Your email address
• Your company name
• Payment information, handled securely by Stripe (we do not store your card details directly)
• Any information you include in messages or enquiries you send to us

4.2 Data we collect automatically

When you visit cenxen.com or use the platform, we automatically collect certain technical data, including:

• Your IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on those pages
• Referring website or source
• Cookie identifiers (see Section 9 for full details)

4.3 Data we collect through third party tools

We use Google Analytics to understand how people use our website. Google Analytics collects anonymised usage data on our behalf. We have enabled IP anonymisation where available.

We use Mailchimp to manage our marketing email list. If you subscribe to marketing emails, your name and email address will be stored in Mailchimp on our behalf.

5. How we use your personal data

We use your personal data only where we have a lawful basis to do so. The table below sets out what we use your data for and the legal basis we rely on.

To provide and manage your Cenxen account and subscription

Lawful basis: Performance of a contract. We need this data to deliver the service you have signed up for.

To process payments

Lawful basis: Performance of a contract. Payments are processed by Stripe. We share only the data Stripe needs to complete your transaction.

To send you service-related communications

Lawful basis: Performance of a contract and legitimate interests. This includes account confirmations, billing notices, and important platform updates.

To send you marketing emails

Lawful basis: Consent. We will only send you marketing emails if you have opted in. You can withdraw your consent and unsubscribe at any time.

To improve our platform and understand how it is used

Lawful basis: Legitimate interests. We use anonymised analytics data to understand usage patterns and make the platform better.

To comply with legal obligations

Lawful basis: Legal obligation. We may need to retain certain data to meet our legal and regulatory obligations.

To run advertising campaigns

Lawful basis: Consent (via cookie consent) and legitimate interests. We use Google Ads and Meta Ads to promote Cenxen. These platforms may use cookies or pixels to measure campaign performance. See Section 9 for more detail.

6. Who we share your data with

We do not sell your personal data. We share it only with the third party service providers we use to operate Cenxen, and only to the extent necessary for those services.

Our current third party processors are:

Stripe

Payment processing. Stripe processes your payment details securely. We do not store card data ourselves. Stripe's privacy policy is available at stripe.com/privacy.

Supabase

Database and backend infrastructure. User data is stored on Supabase servers located in the European Union. Supabase acts as a data processor on our behalf under a Data Processing Agreement.

Google Analytics

Website analytics. Google Analytics collects anonymised usage data about visitors to cenxen.com. Data may be processed by Google on servers outside the UK and EU, subject to appropriate safeguards including Standard Contractual Clauses.

Mailchimp (Intuit)

Email marketing. If you subscribe to our marketing emails, your name and email address will be stored and processed by Mailchimp. Mailchimp is based in the United States. Data transfers are covered by Standard Contractual Clauses. Mailchimp's privacy policy is available at mailchimp.com/legal/privacy.

Google Ads and Meta Ads

Advertising platforms. We may use cookies and pixels from Google and Meta (Facebook) to measure the performance of advertising campaigns. These platforms may process data outside the UK and EU under Standard Contractual Clauses.

We may also disclose your data where required to do so by law, by a court order, or by a regulatory authority.

7. International data transfers

Some of our third party processors operate outside the UK and European Economic Area (EEA), including in the United States. Where this is the case, we ensure that appropriate safeguards are in place to protect your data, including:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) and/or the European Commission
• Adequacy decisions where applicable

Your core account and platform data is stored on Supabase servers located within the European Union. We take reasonable steps to ensure that any international transfers of your data are conducted securely and lawfully.

8. How long we keep your data

We keep your personal data only for as long as is necessary for the purposes described in this policy, or as required by law.

• Account data: retained for the duration of your subscription and for up to 12 months after your account is closed, unless you request earlier deletion
• Payment records: retained for 7 years to comply with UK tax and accounting obligations
• Marketing email data: retained until you unsubscribe or withdraw consent, or until we determine the data is no longer needed
• Analytics data: retained in accordance with Google Analytics default retention settings, typically 26 months
• Enquiry and support data: retained for up to 3 years from the date of the last contact
  

9. Cookies

Cenxen uses cookies and similar tracking technologies on our website and platform. A cookie is a small text file placed on your device when you visit a website.

9.1 Types of cookies we use

Strictly necessary cookies

These are essential for the platform to function. They allow you to log in, navigate the platform, and use core features. These cookies cannot be disabled.

Analytics cookies

We use Google Analytics cookies to understand how visitors use our website, which pages are most popular, and how people find us. These cookies collect anonymised data. They are only set with your consent.

Marketing and advertising cookies

We use cookies and pixels from Google Ads and Meta Ads to measure the effectiveness of our advertising campaigns and to show relevant adverts to people who have previously visited our website. These cookies are only set with your consent.

9.2 Managing your cookie preferences

When you first visit cenxen.com, you will be shown a cookie consent banner that allows you to accept or decline non-essential cookies. You can update your preferences at any time.

You can also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform.

10. Your rights

Under UK GDPR and EU GDPR, you have the following rights in relation to your personal data:

• The right to access: you can request a copy of the personal data we hold about you
• The right to rectification: you can ask us to correct any inaccurate or incomplete data we hold about you
• The right to erasure: you can ask us to delete your personal data in certain circumstances, sometimes called the right to be forgotten
• The right to restrict processing: you can ask us to limit how we use your data in certain circumstances
• The right to data portability: you can ask us to provide your data in a structured, commonly used, machine-readable format
• The right to object: you can object to us processing your data where we rely on legitimate interests as our lawful basis
• The right to withdraw consent: where we process your data on the basis of your consent, you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal
• Rights related to automated decision-making: you have the right not to be subject to decisions made solely by automated means where those decisions significantly affect you

To exercise any of these rights, please contact us at simon@childsey.com. We will respond within one month of receiving your request. We may need to verify your identity before we can action a request.

There is no charge for making a data rights request. However, if a request is manifestly unfounded or excessive, we may charge a reasonable fee or decline to act on it.

11. How to raise a complaint

If you have a concern about how we handle your personal data, please contact us first at simon@childsey.com and we will do our best to resolve the matter.

If you are not satisfied with our response, or if you believe we are not handling your data in accordance with the law, you have the right to lodge a complaint with the relevant supervisory authority.

In the UK, this is the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

If you are based in the EU, you may also have the right to lodge a complaint with the data protection authority in your country of residence.

12. How we keep your data secure

We take the security of your personal data seriously and have put in place appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure.

These measures include encrypted data storage via Supabase, secure payment processing via Stripe, access controls limiting who within our team can access user data, and use of HTTPS across our website and platform.

However, no method of transmission over the internet or electronic storage is completely secure. While we do our best to protect your data, we cannot guarantee absolute security.

13. Links to other websites

Our website may contain links to third party websites. This privacy policy applies only to cenxen.com and the Cenxen platform. We are not responsible for the privacy practices of other websites and encourage you to read their privacy policies before providing any personal data to them.

14. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices, the services we offer, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this policy and, where appropriate, notify you by email.

We encourage you to review this policy periodically to stay informed about how we are protecting your data.

15. Contact us

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

By email: simon@childsey.com

By post: Childsey Ltd, Nantwich Court, 5A Hospital Street, Nantwich, Cheshire, England, CW5 5RH

We aim to respond to all enquiries within 5 working days.