Privacy policy

This policy explains what CLI SECURE LTD does with personal information: what we collect, why we collect it, who we share it with, how long we keep it, and what you can ask us to do about it. It covers this website, our quotation and trade account processes, our sales and support activity, and our returns handling.

CLI SECURE LTD is the data controller for that information. Our details are at the end of this policy. We are registered in England and Wales under company number 10813832.

Whose information this covers

Most of the people we hold data about are individuals acting for a business — a buyer at a reseller, an IT manager at an end user, an installer on site. Business contact details of that kind are still personal data under UK law, and this policy applies to them in the same way as it applies to consumers buying for themselves.

What we collect

Information you give us

Identity and contact details — your name, job title, company name, email address, telephone number, and billing and delivery addresses.
Order information — what you bought, order and invoice references, purchase order numbers, serial numbers, delivery instructions and site contacts.
Account information — your login credentials if you create an account, and your marketing preferences.
Trade account information — company registration and VAT numbers, trade references, and the information needed for a credit assessment.
Correspondence — the content of emails, contact form submissions, quote requests, returns requests and notes of telephone conversations.

Information we collect automatically

Technical data — IP address, device and browser type, operating system, language and time zone settings.
Usage data — pages viewed, products looked at, searches run, what was added to a basket, referring site and how long you stayed.
Cookie data — see the cookies section below.

Information we get from others

Payment confirmation and fraud screening results from our payment providers. We never receive or store your full card number.
Credit reference and business information from credit agencies, where you apply for a trade account with payment terms.
Delivery status and proof of delivery from our carriers.
Analytics and advertising measurement data from the platforms named below.

We do not deliberately collect special category data (such as health or biometric information), and we do not knowingly collect information from children. Our store is aimed at businesses and adults.

Why we use it, and our lawful basis

UK GDPR requires us to have a lawful basis for everything we do with your data. Ours are as follows.

To take and fulfil your order — process payment, arrange delivery, issue licences, provide support, and handle returns and warranty claims. Basis: performance of a contract with you, or steps taken at your request before entering one.
To answer enquiries and produce quotations. Basis: steps taken at your request before a contract, and our legitimate interests in responding to people who approach us.
To assess a trade account application and manage credit. Basis: our legitimate interests in trading safely and recovering what we are owed.
To keep accounting, VAT and statutory records. Basis: compliance with a legal obligation.
To prevent fraud and secure our systems. Basis: our legitimate interests in protecting the business and our customers, and legal obligation where applicable.
To send marketing about products and services like those you have bought or enquired about. Basis: consent, or our legitimate interests in marketing to existing business customers where the law permits. You can opt out at any time.
To improve the site, our range and our service through analytics. Basis: consent for non-essential cookies, and our legitimate interests in understanding how the site is used.
To establish, exercise or defend legal claims. Basis: our legitimate interests in protecting our legal position.

Where we rely on legitimate interests, we have considered whether our interest is outweighed by the effect on you. You can ask us for details of that assessment, and you can object — see "Your rights" below.

Marketing

We will send you product news, offers and technical updates by email only where you have opted in, or where you are an existing customer and the message concerns similar products, which UK electronic marketing rules permit. Every message carries an unsubscribe link, and you can also stop it by emailing us. Opting out of marketing does not stop the operational emails you need — order confirmations, dispatch notices, invoices and returns updates.

Cookies and similar technologies

Cookies are small files placed on your device. We use:

Strictly necessary cookies — these keep your basket, your session and your checkout working, and help protect against fraud. The site cannot function without them, so they are set without consent.
Analytics cookies — these tell us, in aggregate, which pages and products people use, so we can improve the site.
Functional cookies — these remember preferences such as your region or recently viewed items.
Marketing cookies — these measure the effect of our advertising and may allow relevant adverts to be shown to you on other sites.

We ask for your consent before setting analytics, functional or marketing cookies, and you can change or withdraw that consent at any time through the cookie settings on the site. You can also block or delete cookies through your browser, though some parts of the site may then not work properly. Browsers and devices may offer a "Do Not Track" or global privacy signal; we honour recognised opt-out signals where the law requires us to.

Who we share information with

We do not sell your personal information. We share it only with organisations that need it to deliver what you have asked for, or where the law requires it.

Shopify Inc. — provides the ecommerce platform that hosts this store, including checkout and order management. Shopify processes personal data on our behalf under its own data processing terms.
Payment providers — the card and payment services used at checkout, which process your payment details directly and carry out fraud screening. They act as controllers of that payment data in their own right.
Carriers and couriers — the delivery companies who need your name, address, telephone number and email in order to deliver and to notify you.
Manufacturers, distributors and repair partners — where a warranty claim, licence registration or RMA has to be raised with them, we pass the minimum needed, such as name, contact details and serial number.
Email, CRM, analytics and advertising providers — who help us communicate with you and understand how the site performs.
Professional advisers — accountants, auditors, insurers and solicitors, where necessary.
Credit reference and debt recovery agencies — for trade account applications and unpaid business accounts.
Regulators, law enforcement and courts — where we are legally obliged to disclose, or need to in order to defend a claim.
A buyer or successor — if the business is sold, merged or reorganised, information may transfer as part of that.

Where an organisation processes data on our behalf, we put a written contract in place requiring it to keep the data secure and to use it only for the purposes we specify.

Transfers outside the UK

Some of our providers, including Shopify, operate outside the United Kingdom. Where personal data is transferred abroad, we rely on UK adequacy regulations for the destination country, or on the International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses, together with any additional safeguards the transfer needs. You can ask us for details of the safeguards used.

How long we keep it

Order, invoice and VAT records — six full financial years after the end of the year they relate to, as UK tax law requires.
Customer account and contact records — for as long as the account is active, and then up to six years after the last transaction, to cover the limitation period for contractual claims.
Warranty, serial number and RMA records — for the warranty term plus a reasonable period, since warranties on this equipment can run for several years.
Enquiries and quotations that do not lead to an order — normally 24 months.
Marketing preferences and suppression lists — for as long as needed to honour your choice, which means we keep a record of an unsubscribe indefinitely so we do not contact you again by mistake.
Website analytics data — usually no more than 26 months, and in aggregated form after that.
CCTV and building security records, where we hold any — normally 30 days.

When a retention period ends, we delete the data or anonymise it so it can no longer identify anyone.

Keeping it secure

We use technical and organisational measures appropriate to the risk: encryption in transit, access controls so staff see only what their role requires, multi-factor authentication on key systems, patching and monitoring, and supplier due diligence. No system is completely secure, but we take these obligations seriously and we will notify you and the Information Commissioner's Office where a breach requires it.

Your rights

Under UK data protection law you can ask us to:

Give you a copy of the personal data we hold about you, and tell you how we use it.
Correct anything inaccurate or incomplete.
Erase your data, where we no longer have a good reason to keep it. This does not override our legal duty to retain accounting records.
Restrict what we do with it while a query about accuracy or our grounds for using it is resolved.
Object to processing based on our legitimate interests. If you object to direct marketing, we will stop, without exception.
Receive your data in a portable format, or have it sent to another provider, where processing is based on consent or a contract and is automated.
Withdraw consent at any time, where consent is what we relied on. That does not affect anything done before you withdrew it.

We do not make decisions producing legal or similarly significant effects about you by automated means alone.

To exercise any of these rights, email sales@clisecure.com with "Data protection" in the subject line, or write to us at the address below. We will respond within one month, and will tell you if we need to extend that because the request is complex. There is no charge unless a request is manifestly unfounded or excessive. We may need to verify your identity first, and if you are asking on someone else's behalf we will need proof of your authority.

Complaints

If you are unhappy with how we have handled your data, please raise it with us first — most things are quickest to fix directly. If you are still not satisfied, you have the right to complain to the UK supervisory authority:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint

Other sites

This site links to manufacturer sites, datasheets and other third party resources. Those sites have their own privacy policies and we are not responsible for what they do with your information.

Changes to this policy

We may update this policy to reflect changes in what we do or in the law. The current version is always the one published here, and we will draw significant changes to your attention where it is appropriate to do so.

Contact us

CLI SECURE LTD
60 Copthorne Avenue, Ilford, Greater London, IG6 2SQ, United Kingdom
Telephone: 0333 242 1314
Email: sales@clisecure.com
Registered in England and Wales, company number 10813832
VAT registration number GB344829477