Privacy Policy

---

1. Introduction

Welcome to the Cha2GP Ltd website ("we", "us", "our"). Cha2GP Ltd is a company registered in England and Wales. We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, use our services, or otherwise interact with us. It also explains your rights under applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using our website, you confirm that you have read and understood this Privacy Policy. 

2.  Who We Are

Cha2GP Ltd is the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Data Controller: Cha2GP Ltd

Email: info@cha2gp.co.uk

Address: 765, Bath Road, Taplow, SL6 0PR, England, United Kingdom 

3. Personal Data We Collect

We may collect and process the following categories of personal data: 

  3.1 Data You Provide Directly

• Name, email address, and contact details when you register or enquire about our services

• Account credentials if you create an account on our platform

• Billing and payment information (processed securely by our payment provider)

• Communications you send us, including support requests and feedback

Any other information you choose to provide  

  3.2 Data Collected Automatically

• IP address and device identifiers

• Browser type, version, and operating system

• Pages visited, time spent on pages, and navigation patterns

• Referring URLs and search terms

• Cookie identifiers and similar tracking technologies 

  3.3 Data from Third Parties

• Information from analytics providers (e.g., Google Analytics)

• Information from social media platforms if you interact with our social media content

• Publicly available information where relevant to our services 

4. How We Use Your Personal Data

We use your personal data for the following purposes and on the following lawful bases:

4.1 To Provide and Manage Our Services (Contract Performance)

• Processing your account registration and managing your account

• Delivering the services you have requested

• Processing payments and sending billing information

• Responding to your enquiries and providing customer support

4.2 To Comply with Legal Obligations (Legal Obligation)

• Maintaining records required by law

• Responding to lawful requests from regulatory authorities

• Fraud prevention and security monitoring

4.3 For Our Legitimate Business Interests (Legitimate Interests)

• Improving and developing our website and services

• Analysing usage trends and website performance

• Sending service-related communications and updates

• Protecting the security and integrity of our systems

4.4 With Your Consent

• Sending marketing communications about our products and services

• Using non-essential cookies and tracking technologies

• Any other processing for which we have requested and received your consent 

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Cookies are small text files placed on your device that help us provide and improve our services. 

5.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function. These cannot be disabled.

• Performance Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).

• Functionality Cookies: Remember your preferences and settings.

• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.

You can control and manage cookies through your browser settings and our cookie consent tool. Disabling certain cookies may affect the functionality of our website. 

  6. Sharing Your Personal Data

We do not sell your personal data. We may share your data with the following categories of recipients:

• Service Providers: Third-party companies that provide services on our behalf (e.g., hosting providers, payment processors, analytics providers). These parties are contractually required to protect your data.

• Business Partners: With your consent, where relevant to our services.

• Legal and Regulatory Authorities: Where required by law, court order, or regulatory obligation.

• Professional Advisers: Including lawyers, auditors, and insurers in the course of professional services.

• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to a successor entity. 

7. International Data Transfers

Where we transfer your personal data outside the United Kingdom or the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO)

• Adequacy decisions recognising equivalent data protection standards

• Other legally approved transfer mechanisms

You may request further information about such transfers by contacting us.

8. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements.

In general:

• Account data is retained for the duration of your account and up to 7 years after closure

• Transaction records are kept for a minimum of 6 years in accordance with UK tax law

• Marketing data is held until you withdraw consent or request erasure

• Website usage data collected via analytics is typically retained for 26 months

Upon expiry of the applicable retention period, we securely delete or anonymise your personal data.

9. Your Rights Under UK GDPR

As a data subject, you have the following rights in relation to your personal data:

• Right of Access: Request a copy of the personal data we hold about you.

• Right to Rectification: Request correction of inaccurate or incomplete data.

• Right to Erasure: Request deletion of your personal data in certain circumstances ("right to be forgotten").

• Right to Restrict Processing: Request that we limit how we use your data.

• Right to Data Portability: Receive your data in a structured, machine-readable format.

• Right to Object: Object to processing based on legitimate interests or for direct marketing.

• Rights Related to Automated Decision-Making: Not be subject to solely automated decisions that significantly affect you.

• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at privacy@cha2gp.com. We will respond within one month of receiving your request. In complex cases, we may extend this by a further two months, but we will inform you.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113. 

  10. Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure, including:

• Encryption of data in transit using TLS/SSL

• Access controls and authentication requirements

• Regular security assessments and audits

• Staff training on data protection obligations

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.  

  11. Children's Privacy

Our website and services are not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete such information. 

  12. Third-Party Links

Our website may contain links to third-party websites, plug-ins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to review the privacy policy of every website you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on this page with a revised "Last Updated" date. Where changes are significant, we will provide a more prominent notice (such as an email notification).

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us:

Cha2GP Ltd

Email: info@cha2gp.co.uk

Address: 765, Bath Road, Taplow, SL6 0PR, England, United Kingdom