Privacy Policy
Last updated: 26th September 2025
1. Data Controller
Chesamel Limited
Office 403, 29 Lincoln's Inn Fields
London WC2A 3EG
United Kingdom
Email: operation@chesamel.com
Phone: 02033718331
2. Data We Collect
When you use our Digital & AI Readiness Assessment Tool, we collect the following types of personal data:
- Contact Information: Your name, email address, company name
- Professional Information: Industry sector, job role or title
- Assessment Responses: Your answers to digital readiness questions across business, people, and technology domains
- Preferences: Discovery call interest, communication preferences
3. Legal Basis for Processing
We process your personal data on the following legal grounds under GDPR Article 6:
Consent (Article 6(1)(a))
You explicitly consent to us processing your data to provide assessment results and communicate with you about our services.
Legitimate Interest (Article 6(1)(f))
We have a legitimate interest in providing you with personalised assessment results and relevant business insights to help improve your digital transformation journey.
4. How We Use Your Data
We use your personal data for the following purposes:
- Assessment Delivery: Generate your personalised digital readiness assessment report with AI-driven analysis
- Communication: Send you assessment results, recommendations, and follow-up insights
- Discovery Calls: Arrange consultation calls if you've expressed interest
- Service Improvement: Analyse aggregated and anonymised assessment data to improve our tools and methodologies
- Legal Compliance: Meet our legal obligations and protect our legitimate business interests
5. Data Sharing and Third Parties
We do not sell, trade, or rent your personal data to third parties. We may share your data only in the following limited circumstances:
6. Data Retention
We retain your personal data for the following periods:
Assessment Data
2 years from assessment completion date
Contact Information
Until you withdraw consent or request deletion
Communication Records
3 years for business correspondence
After these periods, your data will be securely deleted unless we have a legal obligation to retain it longer.
7. Your Rights Under GDPR
As a data subject, you have the following rights regarding your personal data:
Right of Access
Request copies of your personal data we hold
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data ("right to be forgotten")
Right to Restrict Processing
Request limitation of how we process your data
Right to Data Portability
Receive your data in a structured, commonly used format
Right to Object
Object to processing based on legitimate interests
Right to Withdraw Consent
Withdraw consent at any time (where consent is the legal basis)
Right to Complain
Lodge a complaint with the Information Commissioner's Office (ICO)
8. Data Security
We implement appropriate technical and organisational security measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and user authentication
- Staff training on data protection requirements
- Incident response and breach notification procedures
9. International Transfers
Your personal data is processed within the UK and European Economic Area (EEA). If we need to transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by email or through our website. The "Last updated" date at the top of this policy indicates when it was last revised.
11. Contact Us
If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us:
Operations Team
Email: operation@chesamel.com
Phone: 02033718331
Post: Data Protection Officer, Chesamel Limited, Office 403, 29 Lincoln's Inn Fields, London WC2A 3EG
Data Rights Portal: Access or delete your data
Complaints
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113