Privacy Notice

Last updated: 13 September 2026

CK Enterprises Group Limited ("CK Enterprises", "we", "us" or "our") is committed to protecting your privacy and handling personal information securely, fairly and transparently.

This Privacy Notice explains how we collect, use, store and protect personal information when you:

visit our website;
contact us or request a quotation;
purchase or use our services;
use our web hosting, email, domain, website or IT services;
create or use an account or customer portal;
contact our technical support services; or
communicate or otherwise do business with us.

It also explains your rights in relation to your personal information.

1. Who we are

CK Enterprises Group Limited is a private limited company registered in England and Wales.

Company name: CK Enterprises Group Limited
Company number: 11632973
Website: ckenterprises.co.uk
Email: [email protected]

For personal information that we collect and use for our own business purposes, CK Enterprises Group Limited will normally be the data controller.

For some services, particularly web hosting, email hosting, managed IT services, website management and technical support, we may process personal information on behalf of our customers. In those circumstances, the customer will normally be the data controller and CK Enterprises will act as a data processor.

2. Data protection legislation

We process personal information in accordance with applicable UK data protection and privacy legislation, including:

the UK General Data Protection Regulation ("UK GDPR");
the Data Protection Act 2018;
the Data (Use and Access) Act 2025; and
the Privacy and Electronic Communications Regulations 2003 ("PECR"), as amended.

3. Personal information we collect

The information we collect depends on your relationship with us and the services you use.

Identity and contact information

This may include:

your name;
business or organisation name;
job title;
postal address;
email address;
telephone number; and
other contact information that you provide to us.

Account information

Where you have an account or use our customer systems, we may process information such as:

account identifiers;
usernames;
account contact information;
services associated with your account;
account preferences;
authentication and security information; and
records relating to account activity.

Passwords should normally be stored using appropriate cryptographic protection rather than in readable form.

Billing and transaction information

We may process information relating to:

services purchased;
invoices;
payments;
billing addresses;
transaction references;
payment status; and
accounting records.

Where payments are processed by a third-party payment provider, payment card information may be submitted directly to that provider rather than being stored by CK Enterprises.

Technical and security information

When you access our websites, systems or services, we may automatically collect technical information including:

IP addresses;
browser and device information;
operating system;
date and time of requests;
pages or services accessed;
server and application logs;
authentication attempts;
security events;
network information; and
information used to detect malicious, abusive or unauthorised activity.

We use this information to operate, secure, troubleshoot and improve our systems and services.

Support and communications information

If you contact us for technical support or another enquiry, we may retain:

emails;
support tickets;
telephone notes;
chat or portal communications;
screenshots;
diagnostic information;
system information;
configuration information; and
other information supplied while investigating or resolving an issue.

Technical support may sometimes require temporary or incidental access to information stored within a customer's systems. We will only access information where reasonably necessary to provide the requested service.

Website and hosting information

Where we provide website hosting, website management, email hosting or similar services, our infrastructure may process personal information contained within customer websites, databases, email accounts, log files, backups and other hosted content.

CK Enterprises will normally process this information on behalf of the relevant customer rather than determining the purposes for which that information is used.

Customers are responsible for ensuring that information they place within hosted services is collected and processed lawfully.

Marketing preferences

Where applicable, we may record:

whether you have requested marketing communications;
your communication preferences; and
whether you have unsubscribed or objected to marketing.

4. How we obtain personal information

We may obtain personal information:

directly from you;
when you submit a website form;
when you contact us by email, telephone or another communication method;
when you register for an account;
when you purchase or use a service;
through our customer or support systems;
automatically through the operation of websites, servers and network infrastructure;
from a business or organisation that you represent;
from service providers involved in delivering services to you;
from domain registries or registrars where relevant to domain services; or
from publicly available business sources where appropriate.

Where we receive personal information from a customer in order to provide services on their behalf, we will generally process that information as their data processor.

5. Why we use personal information

We only process personal information where we have a lawful basis for doing so.

Providing our services

We process information where necessary to:

provide web hosting;
provide website design or maintenance;
register or manage domains;
provide email or Microsoft 365 related services;
provide IT consultancy or managed IT services;
provide technical support;
manage customer accounts;
communicate about services;
process orders and payments; and
administer our contractual relationship with customers.

Our lawful basis will normally be performance of a contract or taking steps at your request before entering into a contract.

Operating and securing our services

We process technical, log and security information to:

maintain the availability and reliability of our services;
detect attacks, fraud and abuse;
investigate security incidents;
prevent unauthorised access;
manage backups;
troubleshoot technical problems;
monitor capacity and performance; and
protect our customers, networks and infrastructure.

Our lawful basis will generally be our legitimate interests in operating a secure, reliable and effective IT services business.

Legal and regulatory obligations

We may process information where necessary to:

maintain accounting or taxation records;
respond to lawful requests;
comply with court orders;
investigate or report unlawful activity; or
meet other legal or regulatory requirements.

Our lawful basis is compliance with a legal obligation.

Business administration

We may use personal information for legitimate business purposes including:

managing customer relationships;
maintaining records;
managing suppliers;
handling complaints;
establishing, exercising or defending legal claims;
improving our services; and
managing our business operations.

Where we rely on legitimate interests, we consider whether those interests are proportionate and whether they are overridden by your rights and interests.

Consent

In some circumstances we may rely on your consent, for example for certain marketing activities or website technologies.

Where processing is based on consent, you can withdraw that consent at any time.

Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.

6. Web hosting, managed services and customer data

CK Enterprises provides technology services under which customers may store or transmit information relating to their own employees, customers, members, website visitors or other individuals.

For example, this can occur through:

website hosting;
databases;
email systems;
backups;
Microsoft 365 services;
managed servers;
website maintenance;
technical support; or
other managed IT systems.

Where a customer determines why and how that information is processed, the customer is normally the data controller and CK Enterprises acts as a data processor.

We will process such information only as required to provide the relevant services, in accordance with our contractual obligations, applicable data protection legislation and any applicable data processing agreement.

Customers remain responsible for their own privacy notices, lawful bases, retention requirements and obligations to individuals whose information they process.

7. Sharing personal information

We may share personal information with trusted suppliers and service providers where reasonably necessary to operate our business or provide our services.

These may include providers of:

data centre and server infrastructure;
cloud hosting;
network connectivity;
content delivery and security services;
domain registration;
DNS services;
email services;
Microsoft cloud services;
backup and disaster recovery;
payment processing;
accounting;
customer management;
support and ticketing systems;
security monitoring; and
professional services.

Where another organisation processes information on our behalf, we take appropriate steps to ensure suitable contractual and data protection arrangements are in place.

We may also disclose information:

where required by law;
in response to a valid court order or lawful regulatory request;
where necessary to establish or defend legal rights;
where reasonably necessary to prevent fraud, cybercrime or other unlawful activity; or
as part of a genuine business sale, restructuring, merger or acquisition, subject to appropriate confidentiality and data protection safeguards.

We do not disclose personal information unnecessarily.

8. International transfers

Some technology suppliers involved in delivering our services may operate infrastructure or provide support from locations outside the United Kingdom.

Where personal information is transferred outside the UK, we take reasonable steps to ensure that an appropriate lawful transfer mechanism and safeguards are used.

Depending on the circumstances, these may include:

UK adequacy regulations;
the UK International Data Transfer Agreement;
the UK Addendum to approved contractual clauses; or
another transfer mechanism permitted by UK data protection law.

9. Information security

We take appropriate technical and organisational measures to protect personal information against accidental loss, destruction, alteration, unauthorised disclosure or access.

Depending on the relevant system or service, these controls may include:

access controls;
multi-factor authentication;
encryption;
network security controls;
malware protection;
vulnerability and patch management;
monitoring and logging;
secure backups;
restricted administrative access; and
appropriate procedures for responding to security incidents.

No internet-based or electronic system can be guaranteed to be completely secure. We therefore continually consider security risks and apply controls appropriate to the nature of the information and service concerned.

10. Data retention

We do not retain personal information for longer than reasonably necessary.

Retention periods depend on:

the nature of the information;
the service being provided;
contractual requirements;
security requirements;
applicable limitation periods;
accounting and taxation requirements; and
other legal obligations.

Customer account, contract and financial records may be retained after a service ends where necessary for accounting, taxation, dispute resolution or legal purposes.

Technical and security logs are generally retained for shorter periods appropriate to operational and security requirements.

Information held in backup systems may remain until the relevant backup is rotated, expired or securely overwritten in accordance with our backup procedures.

Where CK Enterprises acts as a processor, customer information will be returned, deleted or retained in accordance with the customer's instructions, contractual arrangements and applicable legal requirements.

11. Cookies and similar technologies

Our websites may use cookies and similar storage or access technologies.

Some are necessary to:

operate the website;
maintain security;
provide requested functionality;
remember preferences; or
maintain user sessions.

We may also use technologies for analytics, performance or other purposes.

Where consent is required under PECR or applicable data protection legislation, we will request consent before using the relevant technology.

Certain technologies may be used without consent where an exemption under applicable legislation permits this.

Further information about the specific cookies and technologies used on our website should be made available through our cookie information or cookie settings facility.

12. Direct marketing

We may occasionally send information about CK Enterprises products or services where permitted by law.

Depending on the circumstances, we may rely on consent or legitimate interests and will comply with applicable electronic marketing requirements.

You can object to or unsubscribe from marketing communications at any time.

We may retain minimal information about an opt-out request so that we can ensure your preference continues to be respected.

13. Your data protection rights

Depending on the circumstances, UK data protection legislation gives you rights including the right to:

request confirmation that we process your personal information;
request access to personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to erase personal information in certain circumstances;
ask us to restrict processing in certain circumstances;
object to processing based on legitimate interests;
object to direct marketing;
receive certain information in a portable format;
withdraw consent where processing is based on consent; and
receive appropriate safeguards in relation to certain significant decisions made solely by automated means.

These rights are not absolute and exemptions may apply.

We may need to request information to confirm your identity before responding to a request. We will not request more information than is reasonably necessary for that purpose.

Where CK Enterprises processes information solely on behalf of one of our customers, you may need to exercise your rights through that customer as the relevant data controller. We will provide reasonable assistance to our customer where required.

14. Data protection complaints

You have the right to complain if you believe that CK Enterprises has not handled your personal information appropriately.

You can raise a data protection complaint by emailing [email protected].

We will:

provide a means for you to raise a data protection complaint;
acknowledge receipt of a data protection complaint within 30 days;
investigate the complaint appropriately;
keep you informed where appropriate; and
communicate the outcome without undue delay.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Current contact and complaint information is available from the Information Commissioner's Office .

Where possible, we would appreciate the opportunity to investigate and address your concerns directly before you contact the ICO.

15. Children's information

Our commercial web hosting, IT and technology services are not specifically directed at children.

However, some customers, including charities and community organisations, may operate services that involve children.

Where CK Enterprises processes personal information relating to children on behalf of one of our customers, we will normally do so as the customer's data processor.

Where our own online services are likely to be accessed by children, we will take account of the additional protections required for children's personal information.

16. Links to other websites

Our website may contain links to websites, services or platforms operated by other organisations.

CK Enterprises is not responsible for the privacy practices of independent third parties. You should review the privacy information provided by the relevant organisation before providing personal information to it.

17. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect:

changes to our services;
changes to the way we process personal information;
changes to our suppliers or systems;
changes in legislation or regulatory guidance; or
improvements to our privacy practices.

The current version will be published on our website together with its most recent update date.

Where a change materially affects how we process personal information, we will take reasonable steps to bring the change to the attention of affected individuals where appropriate.

18. Contact us

For questions about this Privacy Notice, to exercise your data protection rights, or to make a data protection complaint, please contact:

CK Enterprises Group Limited
Website: ckenterprises.co.uk
Email: [email protected]
Company number: 11632973