Legal & Trust
Privacy Policy
Who is responsible
INFINITECTRL LTD operates this website. Roles depend on the processing: our own prospect and account administration may be controller activities; customer-directed processing requires a documented processor arrangement. Privacy contact: privacy@ictrl.co.uk, owner-confirmed active, delivery-tested and monitored by the founder. Registered office (Companies House record checked 9 October 2026): 8 Seacroft Avenue, Appleton, Warrington, England, WA4 5GT.
What this website does
The six reflections use answers temporarily in browser memory to display a pre-written perspective. Closing or restarting discards those answers. There is no free-text collection, AI request, account creation or live Health Check submission in this implementation. Cloudflare provides the website hosting service and may process technical request information as described in its privacy policy. The site does not submit assessment answers or contact details to a service.
Future service processing — pending verification
Health Check responses, business/contact details, Discovery conversations, uploaded documents, project decisions, contracts, billing, service messages and security records are potential service categories. They are not all collected by this website. Before activation, document each actual field, source, purpose, recipient, retention trigger and lawful basis. Marketing must remain separate from assessment and service communications.
Lawful basis and transparency
The owner must settle and document the purpose-by-purpose lawful basis, any necessary legitimate interests assessment, consent evidence and collection notices before processing starts. AI-assisted drafting does not establish that a lawful basis applies. Unnecessary information must not be requested.
Sharing and international processing
Provider catalogue inclusion is not processing approval. The recovered provider register is commissioning material, not a verified production recipient list. Approved services may process internationally; UK-only processing is not promised. Actual entities, locations and transfer safeguards must be confirmed before issue.
Your rights
Depending on the processing and applicable conditions, rights can include access, correction, erasure, restriction, objection, portability and withdrawal of consent. Erasure is not unconditional: legal holds and independently justified retention require assessment. You may complain to the UK Information Commissioner’s Office. Contact privacy@ictrl.co.uk for privacy requests. You may also contact the ICO through its published complaints route.
Retention and security
See Data Handling & Retention for the owner operating baseline and Security & Trust for the distinction between principles and verified deployment. No immediate deletion from every backup or absolute security is promised.
Privacy questions and complaints
Contact privacy@ictrl.co.uk. You can also raise a concern with the Information Commissioner’s Office. Nothing in this notice limits your applicable rights.