Privacy Notice

This notice applies to personal data relating to prospective clients, existing clients, representatives of client organisations, website users, and any person who contacts us through the site or associated contact details.

Cambridge Xploration is the controller of personal data submitted through this website. You can contact us about privacy matters at [email protected].

If you contact us, we may receive the information you provide directly, including your name, organisation, role, email address, phone number, and message content. Technical information may also be processed through normal website and hosting operations, such as IP address, device or browser information, and server log data.

Personal data is usually obtained directly from you, from a person contacting us on behalf of an organisation, from service providers involved in communications or hosting, or from ordinary technical interaction with the website and its infrastructure.

We use personal data to review incoming requests, respond to contact messages, assess whether there is a fit for further discussion, administer any client or prospective client relationship, issue or manage access credentials where relevant, and protect the security of our website and communications. For ordinary business enquiries and relationship management, we rely on legitimate interests under Article 6(1)(f) UK GDPR. Where processing is necessary to take steps requested before entering into an engagement or to perform agreed services, that processing may also be carried out on a contractual basis.

Depending on the context, personal data may be used for contact management, diligence, onboarding, correspondence, access control, record keeping, compliance review, security monitoring, and the establishment, exercise, or defence of legal claims.

We do not publish or sell enquiry data. Information may be accessible to hosting, email, IT, and professional service providers acting on our instructions where necessary to operate the website, administer communications, or support our business and compliance operations.

Where necessary and lawful, personal data may also be disclosed to regulators, advisers, counterparties, or service providers involved in legitimate business, legal, security, or compliance matters. We require third parties acting for us to use personal data only for proper purposes and with appropriate confidentiality and security protections.

The current public site is designed to avoid unnecessary tracking. If non-essential cookies or similar technologies are introduced later, this notice and any required consent mechanism will be updated before those technologies are used.

We do not intend to transfer enquiry data outside the UK except where a service provider's infrastructure requires it. If that changes, we will rely on appropriate safeguards required by UK data protection law.

Enquiry information is retained only for as long as reasonably necessary for correspondence, internal review, and compliance purposes. Where a conversation does not progress, information is reviewed periodically and deleted when no longer needed. Where we are required to retain information for legal, regulatory, record keeping, or dispute-related reasons, we may keep it for longer.

Depending on the circumstances, you may have the right to request access, rectification, erasure, restriction, objection, and data portability. You may also object to processing carried out on the basis of legitimate interests.

If you provide us with personal data relating to another person, you are responsible for ensuring that you are permitted to do so and, where required, for drawing this notice to that person's attention.

Privacy-related requests can be directed to [email protected]. You also have the right to complain to the Information Commissioner's Office if you believe your personal data has been handled unlawfully or unfairly.