Privacy Policy

1. Introduction

CoreVista Solutions LTD ("CoreVista Solutions," "we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website https://corevistasol.co.uk (the "Website") or engage our services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully to understand our practices regarding your personal data.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

3. How We Collect Your Data

We collect personal data through the following methods:

• Direct Interactions: When you fill out a contact form on our Website, request a quote, email us, call us, or engage our services.
• Automated Technologies: When you browse our Website, we automatically collect technical data through cookies, server logs, and analytics tools.
• Third Parties: We may receive data from third-party services such as Google Analytics, payment processors, or referral partners (only where you have consented to such sharing).

4. How We Use Your Personal Data

We use your personal data for the following purposes, based on the legal grounds specified:

We will not use your personal data for purposes unrelated to those stated above without your explicit consent.

5. Cookies

Our Website uses cookies to enhance your browsing experience and collect analytics data. Cookies are small text files stored on your device when you visit a website.

5.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Website to function properly. These cannot be disabled.
• Analytics Cookies: We use Google Analytics to understand how visitors interact with our Website. This helps us improve user experience and content.
• Functional Cookies: These remember your preferences (e.g., cookie consent choices) to enhance your experience.

5.2 Managing Cookies

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Website. For more information about cookies, visit www.allaboutcookies.org.

6. Who We Share Your Data With

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data with the following categories of recipients:

• Service Providers: Third-party vendors who assist us in delivering our services, such as hosting providers, email platforms, payment processors, and analytics services.
• Professional Advisers: Accountants, legal advisers, and insurers where necessary for business operations.
• Regulatory Authorities: Where required by law, we may disclose data to government bodies, regulators, or law enforcement agencies.

All third-party service providers are contractually obligated to protect your data and process it only according to our instructions.

7. International Data Transfers

Some of our third-party service providers may be based outside the United Kingdom. Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO)
• Adequacy decisions confirming that the recipient country provides an adequate level of data protection

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our retention periods are as follows:

• Client project data: 6 years after project completion (for legal and tax purposes)
• Inquiry data (no project): 12 months from last contact
• Marketing consent: Until consent is withdrawn
• Website analytics data: 26 months (Google Analytics default)

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted through our Website
• Secure servers with firewall protection
• Access controls limiting data access to authorized personnel only
• Regular security reviews and updates
• Staff training on data protection obligations

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to Erasure: You can request that we delete your personal data in certain circumstances ("right to be forgotten").
• Right to Restrict Processing: You can ask us to limit how we process your data in certain situations.
• Right to Data Portability: You can request that we transfer your data to another organization or to you in a structured, commonly used format.
• Right to Object: You can object to the processing of your personal data for direct marketing purposes or where we rely on legitimate interests.
• Right to Withdraw Consent: Where we rely on your consent to process data, you can withdraw that consent at any time.

To exercise any of these rights, please contact us using the details in Section 13. We will respond to your request within one calendar month.

If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator. Visit www.ico.org.uk for more information.

11. Children's Privacy

Our Website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your data. Significant changes may be notified to you via email if we have your contact details.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:

We aim to respond to all privacy-related inquiries within 48 business hours.