Legal

Privacy Policy

How we collect, use and protect your personal data — and the rights you have over it.

Last updated: [Date Placeholder]
Please note: This policy is a working template prepared for review. Items shown in [square brackets] — company registration details, addresses, the supervisory authorities you register with, and your data retention periods — should be confirmed with your legal adviser before this page goes live.

1. Introduction

CloudPally ("CloudPally", "we", "us" or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit our website, contact us, or engage our services, and it tells you about your privacy rights and how the law protects you.

We process personal data in line with applicable data protection laws in the regions in which we operate, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Nigeria Data Protection Act 2023 (NDPA), and the Kenya Data Protection Act 2019.

2. Who we are

For the purposes of applicable data protection law, the data controller is CloudPally Ltd, a company registered in England & Wales (company number [Registration Number Placeholder]), with its registered office at [Registered Office Address Placeholder].

If you have any questions about this policy or how we handle your data, you can reach our team using the details in section 15.

3. Data we collect

We may collect and process the following categories of personal data:

  • Information you give us. When you complete a contact form, request a discovery call, or correspond with us, we collect details such as your name, work email address, telephone number, company or organisation, and the content of your enquiry.
  • Information from engagements. Where you become a client, we process the information necessary to deliver our services, including project, billing and account contact details.
  • Technical information. When you visit our website we may automatically collect technical data such as your IP address, browser type and version, device information, and information about how you use our site, collected through cookies and similar technologies (see section 11).

We do not intentionally collect special category data through this website. Please do not submit sensitive personal information in free-text fields unless it is necessary for your enquiry.

4. How we use your data

We use your personal data to:

  • respond to your enquiries and provide the information or services you request;
  • arrange and conduct discovery calls and prepare proposals;
  • deliver, manage and improve our services and our relationship with you;
  • send service-related communications and, where you have agreed, relevant updates about our services;
  • operate, secure and improve our website; and
  • comply with our legal and regulatory obligations.

Where the UK GDPR or equivalent legislation applies, we rely on one or more of the following legal bases to process your personal data:

  • Consent — for example, where you have opted in to receive marketing communications. You can withdraw consent at any time.
  • Performance of a contract — to take steps at your request before entering into a contract, and to deliver services once engaged.
  • Legitimate interests — to respond to enquiries, run and secure our business, and improve our services, provided your interests and rights do not override those interests.
  • Legal obligation — where we are required to process data to comply with applicable law.

6. Sharing your data

We do not sell your personal data. We may share it with:

  • trusted service providers who process data on our behalf (such as hosting, communications and analytics providers), under contracts that require them to safeguard it;
  • professional advisers such as lawyers, auditors and accountants where necessary; and
  • regulators, law enforcement or other authorities where we are legally required to do so.

7. International transfers

We operate across the United Kingdom, Nigeria and Kenya, and some of our service providers may be located in other countries. Where we transfer personal data across borders, we take steps to ensure it receives an adequate level of protection — for example, through recognised adequacy decisions or appropriate contractual safeguards such as standard contractual clauses.

8. Data retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. Enquiry data that does not lead to an engagement is typically retained for [Retention Period Placeholder], after which it is securely deleted or anonymised.

9. How we protect your data

Security is built into how we work. We maintain appropriate technical and organisational measures — including access controls, encryption in transit, and secure cloud infrastructure aligned with recognised best-practice frameworks — to protect your personal data against unauthorised access, loss, misuse or alteration. While no method of transmission over the internet is completely secure, we work hard to safeguard your information and to respond promptly to any incident.

10. Your rights

Subject to applicable law, you have rights over your personal data, which may include the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate or incomplete data;
  • request erasure of your data in certain circumstances;
  • object to or restrict our processing of your data;
  • request portability of data you have provided to us; and
  • withdraw consent at any time where we rely on consent.

To exercise any of these rights, please contact us using the details in section 15. You also have the right to lodge a complaint with the relevant supervisory authority — in the UK, the Information Commissioner's Office (ICO); in Nigeria, the Nigeria Data Protection Commission (NDPC); and in Kenya, the Office of the Data Protection Commissioner (ODPC).

11. Cookies

Our website uses cookies and similar technologies to function correctly and to help us understand how the site is used so we can improve it.

What cookies we use

  • Essential cookies — required for the website to operate. These do not require consent.
  • Analytics cookies — help us understand how visitors interact with the site so we can improve it. These are only set where you have given consent.
  • Preference cookies — remember choices you make to give you a better experience.

Managing cookies

You can control and delete cookies through your browser settings, and you can withdraw or change your consent at any time. Please note that disabling certain cookies may affect how the website functions.

12. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites, and we encourage you to read their privacy policies before providing any personal data.

13. Children's privacy

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational or regulatory reasons. Any changes will be posted on this page with an updated revision date, so we encourage you to review it periodically.

15. Contact us

If you have any questions about this Privacy Policy, or wish to exercise your rights, please contact us:

You can also reach our team through our contact page.