Privacy Policy

1. Who We Are

Cyril Johnston & Co. Ltd is registered in Northern Ireland under company number NI003426. Our registered address is Ballynahinch Road, Carryduff, Belfast, BT8 8DJ.

We operate the website cyriljohnston.com (the “Website”). For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Cyril Johnston & Co. Ltd is the Data Controller.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at: contactcentre@cyriljohnston.com

2. What Data We Collect

We collect the following personal data when you submit an enquiry through our contact form:

  • Your name
  • Your email address

We do not collect any other personal data through this Website. We do not operate user accounts, and we do not process any payment or financial information.

We also collect anonymised analytics data through Google Analytics (see Section 6 below).

3. How We Use Your Data

We use the personal data you provide via the contact form solely to:

  • Respond to your enquiry or request
  • Communicate with you in connection with our products and services

We do not use your data for automated decision-making or profiling. We do not use your data for marketing purposes unless you have separately and explicitly consented to this.

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following lawful bases to process your personal data:

  • Legitimate Interests (Article 6(1)(f) UK GDPR): To respond to enquiries submitted through our contact form and to maintain our business communications.
  • Consent (Article 6(1)(a) UK GDPR): Where applicable, such as in relation to non-essential cookies (see our Cookie Policy).

5. Data Retention

We will retain contact form submissions and associated correspondence for as long as is reasonably necessary to fulfil the purpose for which it was collected, or to comply with any applicable legal, regulatory, or reporting obligations. Once the data is no longer required, it will be securely deleted.

If you would like to request earlier deletion of your data, please contact us at the email address provided in Section 1.

6. Google Analytics

Our Website uses Google Analytics, a web analytics service provided by Google LLC (or Google Ireland Limited for EEA users). Google Analytics uses cookies to collect anonymised information about how visitors use our Website, including pages visited, time spent on the site, and general geographic location (country/city level).

This data is aggregated and does not identify you personally. We use this information to understand how our Website is used and to improve its content and user experience.

Google may transfer and process this data outside the United Kingdom. For more information about how Google handles data, please visit: https://policies.google.com/privacy

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout

7. Data Sharing and Transfers

We do not sell, rent, or trade your personal data to any third parties.

We may share your data with trusted third-party service providers who assist in operating our Website and communications (such as email service providers), where such parties agree to keep your information confidential and process it only on our instructions.

We do not transfer your personal data outside of the United Kingdom, except as described in Section 6 in relation to Google Analytics, which operates under appropriate safeguards.

8. Data Security

We take reasonable and appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our contact form communications are transmitted securely.

However, please note that no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

  • Right of access: You have the right to request a copy of the personal data we hold about you.
  • Right to rectification: You have the right to request that we correct any inaccurate or incomplete data.
  • Right to erasure: You have the right to request that we delete your personal data, subject to certain legal exceptions.
  • Right to restrict processing: You have the right to request that we limit how we use your data.
  • Right to object: You have the right to object to our processing of your data where we rely on legitimate interests as our lawful basis.
  • Right to data portability: You have the right to receive your data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us at: contactcentre@cyriljohnston.com

We will respond to your request within one calendar month. We may need to verify your identity before we can act on your request.

If you are not satisfied with how we handle your request or your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection:

10. Cookies

Our Website uses cookies. Please refer to our Cookie Policy for full details on the types of cookies we use and how you can manage your preferences.

11. Children’s Privacy

Our Website is not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be published on this page with a revised ‘Last updated’ date. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Scroll to Top