CBH Computers LTD (CBH) Privacy & Cookie Statement

ICO Registration No: ZB537021
Company Number: 14013683
Registered address: 27 Old Gloucester Street, London, WC1N 3AX, UK
Telephone: 01442 777444
admin@cbhcomputers.co.uk

This Privacy Statement is Effective as of 15th April 2026

This Privacy & Cookie Statement explains how CBH Computers Ltd (“CBH”, “we”, “us” or “our”) collects, uses, shares and otherwise processes personal data. It describes the types of personal data we collect, the purposes for which we use it, who we may share it with, and the rights available to individuals in relation to that data. We may provide additional privacy information where appropriate for specific services, forms, campaigns, portals, events or other interactions, or where our business practices change.

This Privacy & Cookie Statement applies to CBH’s general privacy practices in relation to personal data concerning our clients, prospective clients, business contacts, suppliers, partners, and other organisations with whom we have, or may have, a business relationship, as well as individuals associated with them.

This Privacy & Cookie Statement does not apply where CBH processes personal data solely on behalf of a client and under that client’s instructions, in which case CBH acts as a processor, for example in connection with certain managed services, cloud services, platforms or applications. However, this Privacy & Cookie Statement may still apply to personal data relating to authorised users of those services where CBH processes that data for its own purposes, including account management, service administration, security, compliance, billing, business operations or legal obligations, in which case CBH acts as a controller in respect of that processing.

Some CBH services, portals, support systems, booking tools or third-party platforms may also be subject to additional privacy information, platform-specific notices or contractual terms. Where that is the case, those additional notices or terms should be read alongside this Privacy & Cookie Statement.

Collection and Use of Personal Information

We may collect and use personal information for a number of purposes, including when you access or use our websites, online services, forms, portals or other digital platforms.

When you visit our website or use our online services, we may collect information that is necessary for the operation, security and improvement of those services. This may include technical information such as your IP address, browser type, device information, operating system, approximate location data derived from your IP address, pages viewed, dates and times of access, referring website addresses, and information about how you interact with our website or services. We may also collect information submitted directly by you through website forms, contact requests, booking tools, downloads, assessments, surveys or similar features. We use this information to provide access to our services, respond to enquiries, operate and secure our website and systems, remember preferences where appropriate, analyse website usage, improve our content, products and services, and comply with legal or regulatory requirements.

Where cookies or similar technologies are used for analytics, functionality, preferences or other non-essential purposes, we will do so in accordance with applicable law and our cookie settings or consent tools where required. The Data (Use and Access) Act 2025 changed the rules so that some low-risk cookies may no longer need consent, while other cookies and similar technologies still do.

  • Responding to requests for information, orders, or support:

When you contact us, whether online or offline, with an enquiry, request information, place an order, request support, book a meeting, download content, complete a form, or otherwise interact with us, we may collect and use the personal information necessary to respond to you, provide the requested products or services, administer our relationship with you, and keep appropriate records of those interactions.

This may include your name, job title, company details, contact information, details of your enquiry or request, correspondence with us, service or order information, contractual information, delivery information, invoicing information, and feedback or survey responses where relevant.

We use this information to respond to enquiries, provide support, fulfil orders, manage service delivery, administer contracts, arrange delivery, issue invoices, maintain business records, monitor service quality, improve our products and services, protect our legal rights, and comply with legal, regulatory and security requirements.

Where lawful, we may also use personal information in connection with business development, direct marketing, service improvement, safety, fraud prevention, information security, and regulatory compliance. Where required by law, we will do so only with the relevant consent or other appropriate lawful basis. PECR applies alongside the UK GDPR to electronic marketing and cookies.

  • Information obtained from third-party sources

We may, on occasion, obtain business contact information from third-party sources for legitimate business development purposes where we consider it lawful and appropriate to do so. This may include names, job titles, company names, business email addresses, business telephone numbers and other business contact details relating to individuals at organisations with whom we may have, or seek to establish, a business relationship.

One such provider is A Direct Marketing Inc. (trading as BookYourData), based in the United States. Where we obtain personal data from third-party data suppliers, we require them to confirm that they are entitled to share that information with us, that the information has been collected and disclosed in accordance with applicable data protection law, and that appropriate transparency information has been provided to the individuals concerned.
Where personal data is obtained from or accessed through suppliers located outside the United Kingdom, we will ensure that any international transfer is subject to appropriate safeguards in accordance with applicable data protection law.

We use this information only for lawful business development and direct marketing purposes, including contacting business professionals about products and services which we believe are relevant to their role or organisation. Individuals may object to this processing or opt out of direct marketing at any time, and we will respect such requests in accordance with applicable law.

Sharing of Personal Information.

We may share personal information with third parties where this is necessary for the purposes described in this Privacy & Cookie Statement, where required by law, or where otherwise permitted by applicable data protection law.

As an IT solutions and managed services provider, we may work with technology vendors, distributors, service providers and business partners, including providers such as Microsoft, Dell, HP and others, in order to deliver products, services, support, licensing, renewals, procurement, implementation, security, billing and other business operations. Where this is necessary, personal information may be shared with such parties on a need-to-know basis and only to the extent reasonably required for the relevant purpose.

We may also share personal information with professional advisers, insurers, regulators, law enforcement authorities, courts, auditors, finance providers, payment providers, logistics providers, and other third parties where necessary for legal, regulatory, contractual, operational, security, dispute-resolution or business administration purposes.

Where third parties process personal information on our behalf, we require them to process it only on our instructions, to keep it secure and confidential, and to use it only for the purposes for which it was disclosed, unless otherwise required or permitted by law.

Direct Marketing Communications.

CBH Computers Ltd may contact existing clients, business contacts, or other organisations with whom we have, or may have, a business relationship for direct marketing purposes by email, telephone or other permitted means, where lawful to do so.

Where we send electronic marketing communications, we do so in accordance with the UK GDPR and the Privacy and Electronic Communications Regulations 2003 (“PECR”). For corporate subscribers, such as limited companies and LLPs, we may rely on legitimate interests for marketing communications where we consider that the communication is relevant and proportionate. For individual subscribers, such as sole traders, certain partnerships, or personal email addresses, we will only send electronic marketing communications where we have a lawful basis and, where required by PECR, the necessary consent or other permitted basis to do so.

We may also obtain business contact information from third-party data suppliers for lawful business development purposes, but we will only use such information where we consider that the supplier is entitled to share it with us and that the intended marketing activity is lawful.

Every marketing communication we send will include a clear and simple way to opt out or unsubscribe where required. You may also object to direct marketing at any time or withdraw consent where consent has been relied upon by contacting us at admin@cbhcomputers.co.uk.

Once an opt-out or objection request is received, we will update our records and take steps to ensure that no further direct marketing is sent to that contact, other than where it is necessary to maintain a suppression record.

Information Security and Accuracy.

We take appropriate steps to protect personal information against unauthorised or unlawful processing and against accidental loss, destruction or damage. These measures may include physical, technical and organisational safeguards such as access controls, authentication measures, encryption, secure systems and communications, device and network management, monitoring, malware protection, backup arrangements, and confidentiality obligations for staff and relevant third parties.

We also take reasonable steps to ensure that the personal information we hold is accurate and, where necessary, kept up to date. We encourage individuals to notify us if their information changes or if they believe that any personal information we hold about them is inaccurate.

Children’s Personal Information

Our website, services and marketing are intended for businesses and business contacts and are not directed at children. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without an appropriate lawful basis, we will take reasonable steps to delete that information or otherwise deal with it in accordance with applicable law.

If you believe that a child’s personal information may have been provided to us in error, please contact us using the contact details set out in this Privacy & Cookie Statement.

Cookies and Tracking Technologies.

Our website may use cookies and similar technologies to support website functionality, security, performance, analytics, preferences and user experience. Cookies are small text files placed on your device when you visit a website. Similar technologies may include pixels, tags, scripts or local storage technologies.

We use cookies and similar technologies to help operate and secure our website, remember preferences where appropriate, understand how visitors use our website, improve content and functionality, and support analytics and reporting. Some cookies or similar technologies may be strictly necessary for the operation of the website, while others may be used only where consent is required and has been given, in accordance with applicable law. The Data (Use and Access) Act 2025 introduced changes so that some low-risk cookies and similar technologies may no longer require consent, while others still do.

We currently use analytics tools such as Google Analytics to help us understand website traffic, usage patterns and engagement with our website. These tools may use cookies or similar technologies to collect information such as IP address, device and browser information, pages viewed, approximate location, time spent on pages, and interactions with the website.

You can manage cookie preferences through your browser settings and through the cookie banner or consent tool made available on our website. Please note that disabling some cookies or similar technologies may affect the availability or functionality of parts of the website.

Further information about cookies and similar technologies used on our website, including how to manage preferences, may be provided through our cookie banner, consent tool or related website notices. Where we use Google Analytics or other third-party analytics or tracking tools, further information about how those providers process personal data may be available in their own privacy information. Information about Google’s privacy practices is available at https://policies.google.com/privacy.

Retention Period.

We retain personal information only for as long as is reasonably necessary for the purposes for which it was collected and processed, including for the purposes of providing our services, managing our business relationships, complying with legal, regulatory, tax, accounting and insurance requirements, resolving disputes, and establishing, exercising or defending legal claims.

Different types of personal information may be kept for different periods depending on the nature of the information, the purpose for which it is used, and any legal or regulatory requirements that apply. Contact information sourced from third-party data suppliers is retained only for as long as it remains accurate, relevant and reasonably necessary for lawful business development and direct marketing purposes, and is securely deleted, anonymised or suppressed where no longer required or where an individual objects to such use.

Further information about our retention practices may be provided on request.

Contact Information

If you have any questions about this Privacy & Cookie Statement, about how CBH Computers Ltd handles personal data, or if you wish to exercise any of your data protection rights, you can contact us using the details set out at the top of this statement or by emailing admin@cbhcomputers.co.uk

Your enquiry will be directed to the appropriate person within CBH responsible for privacy, data protection or information security matters.

CBH Computers Ltd processes personal data in accordance with applicable data protection law, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations 2003 (“PECR”).

Your Rights

Subject to applicable data protection law, you have the right to request access to the personal information we hold about you and, where appropriate, to request that it be corrected, updated, restricted, erased or transferred. Some of these rights apply only in certain circumstances.

You also have the right to object to our processing of your personal information where we rely on legitimate interests, and you have the right to object to direct marketing at any time. If you object to direct marketing, we will stop using your personal information for that purpose and will keep limited suppression information where necessary to ensure that your preference is respected.

If we rely on your consent for any processing, you also have the right to withdraw that consent at any time, although this will not affect the lawfulness of any processing carried out before consent was withdrawn.

To exercise any of your rights, please contact us using the contact details set out in this Privacy & Cookie Statement.

Right to Lodge a Complaint

If you have any concerns about how CBH Computers Ltd has handled your personal information, we would appreciate the opportunity to deal with those concerns in the first instance. You may contact us using the contact details set out in this Privacy & Cookie Statement.

You also have the right to lodge a complaint with the Information Commissioner’s Office (“ICO”) if you believe that your personal information has been processed unlawfully or that your data protection rights have been infringed. Details of how to make a complaint to the ICO are available on its website.

If you are located outside the United Kingdom, you may also have the right to raise a complaint with the relevant data protection authority in your jurisdiction, where applicable.

Changes to our Privacy Statements

We may update or amend this Privacy & Cookie Statement from time to time to reflect changes in applicable law, regulatory guidance, our business practices, our services, our systems, or the way in which we collect, use or share personal information.

The most current version will be made available on our website and will show the relevant effective date or revision date. We encourage you to review this Privacy & Cookie Statement periodically.

Where we make a material change, we may also take additional steps to bring that change to your attention, such as placing a notice on the website or updating relevant website notices or consent tools.

Your continued use of our website, services or other systems after an updated version takes effect will mean that the updated Privacy & Cookie Statement applies from that date.