This Privacy Policy explains how CMS Electronic LTD ("CMS Electronic", "we", "us", or "our") collects, uses, and protects personal data when you visit our website, contact us, or use our services.
We are committed to handling your information in line with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU GDPR (where it applies), and the Data Protection Act 2018.
This policy applies to:
- Visitors to our website at https://cmselectronic.com
- Prospective and existing customers (including businesses and residential clients)
- Individuals who contact us by email, phone, web forms, or other channels about our services
By using our website or contacting us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please do not use our website or submit personal data to us.
The data controller responsible for your personal data is:
CMS Electronic LTD
128 City Road
London, EC1V 2NX
United Kingdom
Email: info@cmselectronic.com
Phone: +44 7397 655855
If you have any questions about this Privacy Policy, how we handle your data, or if you wish to exercise your data protection rights, you can contact us using the details above.
The type of personal data we collect depends on how you interact with us. We may collect:
- Contact and identity details: name, job title, company name, email address, phone number, and any other details you choose to share in enquiry or quote forms.
- Communication data: the content of emails, messages, and call notes when you contact us about projects, support, or general enquiries.
- Project and service information: details about your premises or venue, technical requirements, budgets, timelines, and other information needed to design and deliver our solutions.
- Technical and usage data: IP address, browser type and version, device identifiers, pages visited, time and date of visits, and similar diagnostic data generated when you use our website.
- Cookie and tracking data: information collected through cookies and similar technologies, as described in the section "Cookies & Tracking Technologies" on this page.
- Marketing preferences: your choices regarding whether and how we contact you with updates, news, or case studies.
We do not intentionally collect special category data (such as health information) or data about children. Please do not provide this type of information to us.
We use your personal data only where we have a clear reason to do so. Typical purposes include:
- Responding to enquiries: to reply when you contact us, answer questions about our services, and discuss potential projects.
- Providing quotes and proposals: to prepare, send, and refine tailored quotations, designs, and scopes of work for your project.
- Delivering and managing services: to plan, install, configure, and support our technology solutions, including project coordination, invoicing, and ongoing support.
- Operating and improving our website: to monitor performance, improve content, and keep the site secure and reliable.
- Analytics and insight: to understand how visitors use our website so we can improve user experience, content, and messaging.
- Security, fraud prevention, and compliance: to protect our systems, enforce our terms, exercise or defend legal claims, and comply with legal obligations.
- Marketing (limited and respectful): to share relevant updates, case studies, or service information where you have requested this or where we are otherwise allowed to do so by law. You can opt out at any time.
We do not sell your personal data to third parties.
Under UK GDPR and (where applicable) EU GDPR, we must have a lawful basis to process your personal data. Depending on the situation, we rely on:
- Consent: for example, when you ask us to contact you with marketing updates or you accept non-essential cookies. You can withdraw your consent at any time.
- Contract: where processing your data is necessary to enter into or perform a contract with you or the organisation you represent (for example, preparing quotes, delivering projects, or providing support).
- Legitimate interests: where we have a genuine and fair business reason to use your data and it does not override your rights and freedoms (for example, basic website analytics, maintaining security, and developing our services). When we rely on legitimate interests, we consider the potential impact on you.
- Legal obligation: where we must process data to comply with laws and regulations (for example, tax, accounting, or responding to lawful requests from authorities).
If you have questions about the legal basis we rely on for a specific activity, you can contact us using the details in the "Data Controller Details" section.
We keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including for satisfying any legal, accounting, or reporting requirements.
In general:
- Enquiry and quote information is usually retained for up to 3 years from our last meaningful contact, so we can reference past discussions and proposals.
- Contract and project-related records (including invoices and essential correspondence) are typically kept for up to 7 years to meet legal and tax requirements.
- Technical and analytics data associated with our website is kept for shorter periods that are appropriate for security and performance monitoring.
We use appropriate technical and organisational measures to help protect personal data from accidental loss, unauthorised access, use, alteration, or disclosure. While no system can be guaranteed as completely secure, we work to ensure that access is limited to people who have a genuine business need to know and who are subject to confidentiality duties.
Our website may use cookies and similar technologies to make the site work properly, to understand how it is used, and to help us improve it.
In broad terms, we may use:
- Essential cookies: required for core site functions, such as basic security and navigation. These cannot usually be switched off without affecting how the site works.
- Performance and analytics cookies: to help us understand how visitors use our website (for example, which pages are most visited) so we can improve content and usability.
Where required by law, we will ask for your consent before using non-essential cookies. You can usually control cookies through your browser settings and, where provided, our on-site cookie controls.
For a high-level summary of how we use cookies and similar tools, please refer to this "Cookies & Tracking Technologies" section of our Privacy Policy.
Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, you may have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete your data in certain circumstances (also known as the "right to be forgotten").
- Restriction: ask us to restrict how we use your data in certain situations.
- Objection: object to our processing where we rely on legitimate interests, or object to direct marketing.
- Data portability: request that we provide your data in a structured, commonly used, machine-readable format where the legal basis is consent or contract and the processing is carried out by automated means.
- Withdraw consent: where we rely on your consent, you can withdraw it at any time.
If you wish to exercise any of these rights, please contact us using the details in the "Data Controller Details" section. We may need to confirm your identity before responding. We aim to respond within one month, or explain if more time is needed.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data protection authority. However, we would appreciate the chance to deal with your concerns first, so please consider contacting us in the first instance.
We may share your personal data with trusted third parties who help us run our business and deliver our services. These may include:
- Website hosting and IT infrastructure providers
- Email, communications, and productivity platforms
- Analytics and performance monitoring tools
- Accounting, invoicing, and payment-related service providers
- Professional advisers (such as legal, financial, or technical consultants)
Where we use third-party service providers, we require them to use your data only as necessary to provide their services to us, to protect it appropriately, and to comply with applicable data protection laws.
Your personal data may be processed outside the UK or European Economic Area (EEA) where service providers are located or store data. In these cases, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other recognised protections, to keep your data secure.
We may update this Privacy Policy from time to time to reflect changes in our services, how we handle personal data, or applicable laws and guidance.
When we make significant changes, we will update the date below and, where appropriate, provide a more prominent notice on our website. We encourage you to review this page periodically to stay informed about how we protect your information.
Effective date: 1 July 2026