Privacy Policy

Data Controller

CDP Governance (Sindri Jónsson, Principal) is the data controller for personal data collected through this website.

Contact: contact@cdp-governance.com

What Data We Collect

When you submit a form on this website, we collect the information you provide:

• Full name
• Work email address
• Company name (if provided)
• Role or outbound channel (depending on the form)
• Free-text responses describing your needs

We also collect technical metadata with each submission: referring URL, user agent, and submission timestamp. We do not use tracking cookies or third-party analytics scripts.

Legal Basis for Processing

We process your personal data on the following bases under UK GDPR:

• Consent: By submitting a form, you consent to us processing your data to respond to your enquiry.
• Legitimate interest: To respond to business enquiries and assess fit for our engagements.

How We Use Your Data

We use the data you provide solely to:

• Respond to your enquiry or submission
• Assess whether our services are a fit for your needs
• Communicate with you about a potential or active engagement

We do not sell your data to third parties. We do not use your data for marketing purposes beyond responding to the enquiry you initiated.

Data Retention

Enquiry data is retained for 12 months from submission, then deleted unless an engagement begins. If an engagement is agreed, data is retained for the duration of the engagement and any contractual retention period.

Third-Party Processors

We use the following third-party services to operate this website:

• Hosting provider (for serving the website)
• Database provider (for storing form submissions)

These providers process data on our behalf under appropriate data processing agreements. No data is sold to or shared with advertisers or data brokers.

Cookies

This website uses only functional cookies (theme preference stored in your browser's local storage). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request rectification of inaccurate data
• Request erasure of your data
• Request data portability
• Object to processing of your data
• Withdraw consent at any time

To exercise any of these rights, contact us at contact@cdp-governance.com. We will respond within 30 days.

Complaints

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).