Talk to us

Legal · last updated 18 May 2026

Privacy policy.

How Cirql Works Ltd (trading as eCirql) collects, uses, stores and protects personal data. Written to comply with UK GDPR and the Data Protection Act 2018.

1. Who we are

Cirql Works Ltd (trading as eCirql) is a company registered in England and Wales under company number 16173373. We are registered for VAT under GB483372767. Our registered office is in Manchester, United Kingdom. We act as the data controller for the personal data described in this policy under the UK GDPR and the Data Protection Act 2018.

2. What information we collect

We collect the following categories of personal data:

  • Identity data: name, job title and the organisation you represent.
  • Contact data: email address, phone number and postal address.
  • Technical data: IP address, browser type, time zone, operating system and the device you use to access our site.
  • Usage data: pages you visit, time spent on the site, and the links you follow.
  • Marketing and communications data: your preferences for receiving marketing from us.
  • Project data: information you provide when discussing an engagement, including details of the integrations, platforms and systems you operate.

We do not knowingly collect special category data (health, political beliefs, religion, biometrics) unless you provide it explicitly in the course of a project.

3. How we collect your data

  • Direct interactions: when you fill in a form on this site (typically the contact form, the chat widget, or any service-page enquiry form), email us, or speak to us on a call.
  • Automated technologies: when you browse the site, we collect technical and usage data via cookies and similar technologies. See our cookie policy for details and to manage your preferences.
  • Third parties: we use HubSpot for customer relationship management and marketing automation, and Cloudflare for site hosting and security. These providers may collect technical data on our behalf.

4. How we use your information

We process personal data on the lawful bases of legitimate interest, performance of a contract, consent (where collected), and compliance with legal obligations. We use your data to:

  • Respond to enquiries and provide the services you have asked us to perform.
  • Manage active client engagements and operate the integrations we have shipped under retainer.
  • Send you marketing communications about our services where you have opted in, or where you are an existing client and the marketing is relevant to the services you receive.
  • Improve our website, our services and the way we communicate.
  • Comply with legal, accounting and regulatory obligations.

5. Sharing your data

We share personal data only with trusted third parties:

  • HubSpot: our CRM and marketing platform.
  • Cloudflare: our hosting and security provider.
  • Professional advisers: accountants, auditors and lawyers, only where they need the data to perform their work for us.
  • Government bodies and regulators: only where required by law.

We do not sell your personal data. Ever.

6. International data transfers

Some of our third-party providers (notably HubSpot) operate outside the UK. Where personal data is transferred outside the UK, we rely on appropriate safeguards: UK adequacy regulations where they apply, the International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK addendum. HubSpot's EU data centre is used for our deployment where possible.

7. How long we keep your data

We retain personal data only for as long as we need it for the purposes described in this policy. As a general guide:

  • Enquiry data (contact form submissions where no engagement follows): up to 24 months.
  • Active client data: for the duration of the engagement, plus 7 years for accounting and audit purposes.
  • Marketing data: until you opt out, then a short residual period to confirm the opt-out is recorded.
  • Technical and usage data: typically 26 months in HubSpot, in line with our cookie settings.

8. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Have inaccurate personal data corrected.
  • Have your personal data erased where we no longer have a lawful basis to hold it.
  • Object to or restrict our processing of your personal data.
  • Withdraw consent at any time where consent is the lawful basis we rely on.
  • Request that personal data we hold about you is transferred to you or to another provider.
  • Lodge a complaint with the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email [email protected]. We will respond within one month.

9. Cookies

We use cookies and similar technologies on this site. The full list of cookies, the categories they fall into, and how to manage your preferences are set out in our cookie policy. You can change your cookie choices at any time using the .

10. Updates to this policy

We may update this policy from time to time. The current version is dated above. Material changes will be highlighted on this page and, where appropriate, notified to existing clients by email.

11. Contact us

For any question about this policy, your personal data, or how we process it, contact us:

See also: cookie policy, AI policy, terms of agreement.

Get in touch

Tell us what you’re trying to connect.

And what’s in the way. We will tell you whether we are the right people to do it. Drop us a line below, or open the chat in the corner of the screen.

Direct: [email protected]