Privacy Notice

1. Who we are

Cesario Consulting Limited is a company registered in England and Wales under company number 17371738.

Cesario Consulting Limited is the controller of the personal information described in this notice.

If you have a question about this notice or how we handle personal information, you can contact us at info@cesario.consulting.

2. Information we collect

If you submit an enquiry through our contact form, we collect the information you choose to provide, including:

• Your name
• Your work email address
• Your company, if provided
• The type of support you are interested in
• Information you include when describing your challenge
• Your acknowledgement of this Privacy Notice

We may also receive technical information necessary to operate and secure the website and process your request.

Please avoid including sensitive personal information in your enquiry unless it is genuinely necessary.

When you make or update your cookie preferences, we record a pseudonymous consent identifier, an event identifier, your analytics preference, the type of consent event, the consent configuration version, the website language and the date and time of the event.

Consent audit events do not include your name or email address. Technical information may also be processed by our infrastructure provider when handling requests.

3. How we use your information

We use information submitted through the website to:

• Review and respond to your enquiry
• Understand the nature of the support you are seeking
• Communicate with you about a potential engagement
• Maintain appropriate records of business enquiries
• Protect the website and enquiry process from misuse or abuse

We do not currently use contact-form information to subscribe you to marketing communications or automated email campaigns.

4. Legal basis for processing

Depending on the circumstances, we process enquiry information because it is necessary to take steps at your request before entering into a contract, and/or because we have a legitimate interest in receiving, reviewing and responding to genuine business enquiries and managing prospective business relationships.

Where we rely on legitimate interests, our interests are to operate and develop our consultancy business, communicate with prospective clients and maintain appropriate business records.

We rely on our legitimate interests in demonstrating and managing compliance with applicable privacy requirements to maintain records of cookie-consent decisions.

We rely on your consent to use non-essential analytics technologies, including Google Analytics 4. You can withdraw that consent at any time using the Cookie preferences control in the website footer.

5. Service providers and recipients

We do not sell your personal information.

We use service providers to operate the website and deliver enquiries. These currently include:

• Cloudflare, which provides website hosting, security, serverless infrastructure and D1 database services used to process contact-form requests and maintain cookie-consent audit records
• Resend, which provides the email-delivery service used to send contact-form enquiries to us
• Google, whose Gmail service is currently used to receive and manage enquiries
• Google Analytics 4 and Google Tag Manager, which we use, with your consent, to measure website usage and successful contact-form enquiries

These providers may process information on our behalf in accordance with their contractual and data-protection obligations.

6. International transfers

Some of the service providers we use operate internationally. As a result, personal information may be processed in countries outside the United Kingdom.

Where applicable, we rely on appropriate safeguards for international transfers in accordance with UK data-protection law.

7. How long we keep information

Where an enquiry does not result in an ongoing client relationship, we generally retain enquiry information for up to 24 months after our last meaningful contact.

If an enquiry develops into a client relationship, relevant information may be retained for longer where necessary to manage that relationship, maintain business records, meet legal or regulatory requirements, or establish, exercise or defend legal claims.

Cookie-consent audit records are retained for six calendar months from the date of each recorded event. Records older than six months are automatically deleted through a daily scheduled cleanup process.

8. Website analytics and cookies

We use a necessary cookie to remember your cookie preferences and manage your consent choices. This cookie is called cc_cookieand is configured to expire after 182 days.

The cookie stores information about your selected preferences and consent status. It is used to remember your choices and does not itself enable analytics tracking.

We also maintain a consent audit record using Cloudflare Workers and Cloudflare D1. This records whether analytics consent was accepted or rejected, when the decision was recorded, and associated pseudonymous identifiers and consent metadata.

If delivery of a consent audit event is temporarily unsuccessful, a pending event may be stored in your browser's local storage and retried later. Successfully delivered events are removed from the pending queue.

We also use your browser's local storage to remember your preferred website language. This preference is stored under the key cesario-languageand contains only your selected language (English or Italian).

When you first visit the website, your browser's language settings may be used to select the initial language. If you manually change language, your selection is remembered for future visits. This preference is used only to provide your chosen language and is not used for analytics, advertising or tracking.

Your language preference remains stored in your browser until you change it or clear your browser's website data. It does not require your analytics consent.

You can change or withdraw your analytics consent at any time using the Cookie preferences control in the website footer. Changing your preferences does not affect the lawfulness of any processing carried out before your withdrawal.

With your consent, we use Google Analytics 4 (GA4), implemented through Google Tag Manager, to understand how visitors use our website and improve its content and services.

Analytics may collect information such as pages visited, interactions with the website, browser and device information, approximate geographic location and pseudonymous online identifiers. Analytics cookies may be placed on your device when you grant permission.

When you successfully submit a contact enquiry, we may record an analytics event indicating the selected service and website language. We do not include your name, email address or free-text enquiry in this analytics event.

Non-essential analytics tracking remains disabled unless you provide consent. You can withdraw that consent at any time using Cookie preferences in the website footer. We do not currently activate advertising or remarketing tracking.

9. Your rights

Depending on the circumstances, UK data-protection law may give you rights relating to your personal information, including rights of access, rectification, erasure, restriction, portability and objection.

In particular, where processing is based on legitimate interests, you have the right to object to that processing in certain circumstances.

To exercise your rights, contact info@cesario.consulting.

10. Complaints

If you have concerns about how we handle your personal information, please contact us first so that we can try to resolve the issue.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data-protection supervisory authority, at ico.org.uk.

11. Automated decision-making and marketing

We do not currently use information submitted through the contact form for automated decision-making, profiling or automated marketing communications.

12. Changes to this notice

We may update this Privacy Notice when our website, services or data-processing activities change. The latest version will be published on this page with an updated revision date.