Privacy Policy
Privacy Policy
Effective Date: 17 June 2025
Last Updated: 17 June 2025
Your privacy is important to C7 Labs UK Limited ("C7") and we are committed to safeguarding your personal information.
C7 is a technology services company registered in England and Wales with company number 16568411.
As such, C7 must fully comply with all applicable laws and regulations created in the United Kingdom and beyond. In providing our technology services, C7 may be required to ask for and to receive personal information (hereinafter referred to as "personal data") about you.
C7, in asking for personal data, will process this data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018 ("UK GDPR"). The UK GDPR imposes a duty on C7, as both the controller and processor, to comply fully with the data protection principles as contained in the UK GDPR.
Our services are intended exclusively for business and institutional use.
There may be instances whereby C7 will receive personal data from a source other than you ("indirectly collected personal data"). In such situations, C7 will take the necessary steps (and use its best endeavours) to inform you of the personal data that we may request and receive. This will include the source of said personal data and whether the personal data was obtained from a publicly available source.
Failure to provide personal data, as requested by C7, will result in C7 being unable to continue a business relationship and provide its services to you.
What personal data will C7 collect about me?
The personal data asked for is solely for the purposes of C7 meeting its operational obligations and will include details of an individual's identity and contact information for verification purposes.
Under no circumstances will C7 request personal data deemed to be special category data as interpreted under Article 9 of the UK GDPR.
How will C7 use the information they collect about me?
C7 will process your personal data as required by law and regulation for the following reasons:
To act for you in respect of any matters in which you have instructed C7;
To provide technology services, support, and solutions to you and your organisation;
To monitor and record electronic communications for investigation and fraud prevention purposes, for crime detection, prevention, investigation and prosecution, and to enforce or defend C7, itself or through third parties to whom it delegates such responsibilities or rights in order to comply with a legal obligation imposed on C7 to pursue C7's legitimate interests in relation to such matters or the processing in the public interest;
To update and maintain records and for fee billing; to carry out statistical analysis and market research, and which processing is necessary to perform a relevant contract with you, comply with legal obligations and/or which is necessary for C7's legitimate interests indicated above.
Personal data will be kept confidential (and stored in a secure location) except where disclosure is required or permitted by law (for example to government bodies and law enforcement agencies). C7 will not, under any circumstances, sell or otherwise transfer any personal data to commercial companies or other organisations.
Additionally, in order to ensure the smooth provision of technology services, C7 may be required to disclose personal data to other parties such as technology partners and service providers.
Other than transfers of personal data to a Member State of the European Economic Area, C7 may have instances whereby personal data will be transferred to:
an adequate country that has either an adequacy decision in force from the UK Government or the jurisdiction in question is a designated jurisdiction.
a third country that has appropriate or suitable safeguards that apply to the receipt of personal data, such as Standard Contractual Clauses or certification schemes.
In such cases C7 will advise you of the circumstance of transferring personal data to either the adequate or third country jurisdiction.
Your rights under the UK GDPR
Articles 15 to 22 of the UK GDPR confer upon you, as the data subject, certain rights. These rights are:
Right to data portability – you have the right to have the data C7 holds about you transferred to another organisation.
Right of access – you have the right to request a copy of the information C7 holds about you.
Right to object to processing for direct marketing purposes (in this case the right is not applicable as C7 does not process personal data for direct marketing purposes under any circumstance(s))
Right to object to processing on grounds of legitimate interests
Right to object to processing for historical research or statistical purposes
Right to rectification – you have a right to correct data C7 holds about you that is inaccurate or incomplete.
Right to erasure – in certain circumstances you can request that the data C7 holds about you can be erased from C7's records.
Right to restriction of processing – where certain conditions apply, you have the right to restrict the processing.
Right to be notified of rectification, erasure and restrictions
Right not to be subject to decisions based on automated processing
The UK GDPR imposes a duty on C7 to comply with any request from you to exercise your rights and facilitate the exercise of said rights.
Should you have any queries relating to your rights please contact the Data Protection Officer of C7 by writing to the address stated at the end of this Privacy Notice.
Alternatively, you are at liberty to directly contact the Information Commissioner's Office (contact details at end of this Privacy Notice) to discuss matters.
Cookies, web statistics and third-party monitoring
C7 maintains continuous logs of its website activity. These log files include the details of website users' IP address, browser type and page last visited etc. The log files are used to analyse how the website is being used by visitors and may be kept in an anonymised form for historical records.
How long will C7 keep my personal data?
We will hold your personal information on our systems for as long as is necessary for the relevant service we provide to you. C7 is required to maintain accurate and up-to-date records in order to comply with its obligations whilst a service is provided.
In general, C7 policy is, once a business relationship ceases, that personal data will be retained, in a secure location, for a period of 6 years after the end of said business relationship. After 6 years all personal data will be destroyed unless there are compelling reasons (taxation, statutory or otherwise) to not do so.
Can I find out what personal information C7 hold about me?
Yes – as already stated you have the right of access to your personal data that C7 has processed.
Should you require this personal data, and upon receipt of your written request, C7, as stipulated under the UK GDPR, will notify you of any action taken in compliance with your request:
as soon as practicable, and
in any event within a period of one (1) calendar month following receipt of your request
Complaints
C7 takes your privacy extremely seriously. Our policies and procedures relating specifically to your personal data and generally to our compliance with the UK GDPR as a whole are treated with the utmost care and consideration.
Article 77 of the UK GDPR confers upon you the right to make a complaint to the Information Commissioner's Office ("the ICO") if you consider that:
C7 has breached or is likely to breach any operative provision, and
the breach involves or affects or is likely to involve or affect –
any personal data relating to you, or
any data subject rights you have
Under the UK GDPR, the ICO will make contact with you to progress your complaint to investigation and resolution. As with your right to make a complaint you also have rights of appeal under the UK's data protection legislation.
Should you wish to not contact the ICO directly you may contact C7 outlining the full facts of your complaint.
Contact details
C7 Labs UK Limited
Email: info@c7.digital
Address:
Data Protection Officer
C7 Labs UK Limited
7 Cavendish Place
London
United Kingdom
W1G 0QB
Information Commissioner's Office
Telephone: 0303 123 1113
Email: casework@ico.org.uk
Website: ico.org.uk
Address:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF