Privacy Notice
How Contrac uses personal data collected through this landing page.
Who we are and how to contact us
Venridge Ltd, trading as Contrac ("Contrac", "we", "us"), decides how and why your personal data is used, so we are its controller under UK data protection law. We are registered in England and Wales under company number 01183345, with our registered office at Part Ground Floor, Raglan House, Malthouse Avenue, Cardiff Gate Business Park, Cardiff, CF23 8RA. Our ICO registration number is ZA426376.
For any privacy question or request, contact us by:
- Email: info@contrac.co.uk
- Phone: 03300 584441
- Post: Data Protection, Venridge Ltd, Part Ground Floor, Raglan House, Malthouse Avenue, Cardiff Gate Business Park, Cardiff, CF23 8RA
We have not appointed a Data Protection Officer. The contacts above handle all privacy matters.
This privacy notice covers personal data collected through this campaign landing page, enquiries submitted through it and related sales follow-up. It does not cover personal data we process on our customers' behalf when delivering managed IT services. That processing is governed by our customer contracts and the relevant customers' privacy notices.
What we collect
| Type of data | Examples | Where it comes from |
|---|---|---|
| Enquiry details | Name, company, work email, phone number, number of employees, what you would like help with | You, through the enquiry form |
| Campaign information | Campaign tags in the page address (source, medium, campaign name, term and content), the address of the page you enquired from, and the date and time of your enquiry | Recorded with your enquiry when you submit the form |
| Security data | IP address, used briefly to block spam and repeated submissions | Collected automatically when you submit the form |
| Communications | Emails, call notes and meeting records about your enquiry | You and our staff |
We do not ask for sensitive information such as health, ethnicity or religion. Please do not include it in the form.
How we use it and why we're allowed to
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry, preparing pricing and arranging an IT assessment | Legitimate interests: replying to business enquiries |
| Recording basic campaign information with your enquiry, to understand which campaigns generate enquiries | Legitimate interests: managing our marketing spend |
| Protecting the page and form from spam, fraud and misuse | Legitimate interests: keeping our systems secure |
| Sending business-to-business marketing | As described under "Marketing" below |
| Meeting legal, tax and accounting duties | Legal obligation |
Where we rely on legitimate interests, we have weighed our interests against your rights. You can ask us for details of that assessment.
Marketing, campaign information and cookies
Marketing. We may use business contact details to send relevant information about Contrac's IT services. For corporate subscribers, such as limited companies and limited liability partnerships, we generally rely on legitimate interests when using personal data for this purpose. For sole traders and other individual subscribers, including certain partnerships, we will obtain consent unless the legal requirements for the soft opt-in exemption are met.
Submitting an enquiry does not, by itself, constitute consent to receive ongoing marketing. We will use your details to respond to your request and manage related sales discussions.
You can object to direct marketing or withdraw your marketing consent at any time by using the unsubscribe link in our marketing emails or contacting us. We retain the minimum information needed on a suppression list to respect your preferences.
Campaign information. We record basic campaign information, such as the campaign name or source associated with your enquiry, to understand which campaigns generate enquiries. We do not retain individual advertising click identifiers or send your enquiry details to advertising platforms.
Cookies and tracking. This landing page does not set cookies, use your browser's local storage, or run analytics, advertising pixels or other tracking tags, and it does not load content from third parties. If we add any of these, we will update this notice and ask for your consent first where the law requires it.
Who we share it with
We share personal data where necessary for the purposes described in this notice. Service providers processing personal data on our behalf must act under our instructions and appropriate contractual terms. Some recipients, such as professional advisers and regulators, may act as independent controllers and are responsible for their own processing.
| Recipient | Why |
|---|---|
| Website hosting and email service providers | Hosting this page, storing enquiries and delivering them to our sales team |
| Professional advisers, auditors and insurers | Legal, financial and insurance advice |
| Police, regulators and courts | Where the law requires it |
| A buyer or investor in all or part of our business | Due diligence and transfer, under confidentiality |
We never sell your data.
Transfers outside the UK. Our hosting and email service providers may process data outside the UK, including in the United States. Where they do, the transfer is covered by UK adequacy regulations, including the UK–US data bridge where the provider is certified, or by the ICO's international data transfer addendum included in the provider's data protection terms. To request a copy of the relevant safeguards, contact us using the details above.
How long we keep it and how we protect it
| Data | How long we keep it |
|---|---|
| Enquiries stored by our form system | Deleted automatically 24 months after submission |
| Enquiry emails and sales notes, if you don't become a customer | Deleted or anonymised 24 months after our last contact with you |
| Campaign information | Kept with your enquiry and deleted at the same time |
| Marketing suppression list | As long as needed to honour your opt-out; minimum contact details and preference records necessary to honour your marketing objection or withdrawal of consent |
| Spam-protection data | IP addresses are converted to an irreversible code, and the counters linked to them expire after 10 minutes. Technical logs held by our hosting provider are kept only for the short period that provider sets for security and troubleshooting |
If you become a customer, our customer contract terms explain how we handle your data from then on.
Security. We protect personal data with access controls and encryption in transit. Access is limited to people who need it to handle your enquiry.
Your rights and how to complain
You have rights over your personal data, and exercising them is usually free. You can ask us to:
- give you a copy of the data we hold about you
- correct data that is wrong or incomplete
- delete your data
- restrict how we use it
- stop using it, including an absolute right to stop direct marketing
- transfer data you gave us to another organisation, where that applies
- withdraw consent, where we rely on it
Some rights depend on the circumstances and the lawful basis for processing. Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn. Your right to object to processing for direct marketing is absolute.
We do not make decisions about you based solely on automated processing.
To make a request, use the contact details at the top of this notice. We may need to confirm your identity. We will reply within one month, or tell you within that month if a complex request needs up to two more months.
Complaints. If you have concerns about how we handle your personal data, please contact us at info@contrac.co.uk or using the postal contact details above. We will acknowledge your complaint within 30 days of receiving it, investigate without undue delay, keep you informed of progress and communicate the outcome. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes. We will post any changes to this notice on this page.
Last updated: 15 October 2026