Privacy Policy
Last updated: [date]
1. Who we are
Diverse Made Media Ltd is the data controller for personal data collected through this site. We are registered in England and Wales under company number 14458420, with our registered office at [registered office address].
We are registered with the Information Commissioner’s Office under registration number [ICO registration number].
If you have any questions about this policy or about how we handle your data, contact us at [privacy@caerusrig.com or sales@caerusrig.com].
ICO registration: if DMM processes personal data electronically, the annual data protection fee is almost certainly payable. Check the status before publishing a number here.
2. What we collect
We collect the information you give us when you contact us or submit a form on this site. Depending on the form, that may include:
Your name
Your email address
Your telephone number
Your company or organisation
Your job role
Your region
Details of the system configuration you are interested in
Information about your production, timescales and requirements
Anything else you choose to tell us in a free-text field
We also collect limited technical information automatically, including your IP address, browser type, device type and how you use the site. See the cookies section below.
3. Why we use it and our lawful basis
Responding to your enquiry, preparing a quotation and arranging a demonstration. Our lawful basis is legitimate interests, specifically responding to a request you have made, and where relevant taking steps to enter into a contract with you.
Sending you the product brochure you requested. Our lawful basis is legitimate interests, specifically fulfilling your request.
Adding you to the CAERUS Academy waiting list and telling you when courses open in your region. Our lawful basis is consent, which you give when you submit the form, and which you can withdraw at any time.
Sending you occasional updates about CAERUS products, modules and training. Our lawful basis is consent, or legitimate interests where you are an existing customer and we are telling you about similar products.
Understanding how the site is used so we can improve it. Our lawful basis is consent for non-essential cookies.
Meeting our legal and accounting obligations. Our lawful basis is legal obligation.
These bases describe the design in the build spec. If the actual HubSpot setup differs, the policy must change to match reality rather than the other way round.
4. Who we share it with
We do not sell your data and we do not share it for anyone else’s marketing.
We share it with service providers who help us run our business, acting on our instructions:
HubSpot, our customer relationship management and email platform
Framer, which hosts this website
Google Workspace, which we use for email and documents
[Any analytics provider, once confirmed]
We may also disclose information where we are required to by law.
5. International transfers
Some of our service providers are based outside the UK, including in the United States. Where your data is transferred outside the UK, we rely on [the UK International Data Transfer Addendum / adequacy regulations] to make sure it receives an equivalent level of protection.
HubSpot is US-headquartered. Check which data region your portal is hosted in and what transfer mechanism their DPA relies on, then state it accurately here.
6. How long we keep it
Enquiries and configuration requests: [three] years from our last contact with you, unless you become a customer.
Customer records: for the duration of the relationship and for [six] years afterwards, to meet our legal and accounting obligations.
Academy waiting list: until you unsubscribe or [two] years from signup, whichever is sooner.
Marketing contacts: until you unsubscribe.
Pick periods you can actually stick to. A policy promising deletion that never happens is worse than a longer, honest period.
7. Your rights
Under UK data protection law you have the right to:
Ask for a copy of the personal data we hold about you
Ask us to correct data that is inaccurate or incomplete
Ask us to delete your data in certain circumstances
Ask us to restrict how we use your data in certain circumstances
Object to us using your data where we rely on legitimate interests
Ask us to transfer your data to another provider in certain circumstances
Withdraw your consent at any time, where we rely on consent
To exercise any of these rights, contact us at [privacy@caerusrig.com]. We will respond within one month.
You can unsubscribe from our emails at any time using the link in any message we send.
8. Cookies
We use cookies and similar technologies on this site.
Essential cookies are needed for the site to work and for our forms to function. These are set without your consent because the site cannot operate without them.
Analytics and marketing cookies help us understand how the site is used and how people find us. These are only set if you agree to them. You can change your choice at any time using the cookie settings link in the footer.
The cookies we use are set by [Framer, HubSpot and any analytics provider, to be confirmed].
HubSpot forms and tracking set non-essential cookies. Under PECR these need consent before they load, which means a cookie banner with a genuine reject option. This is not currently in the build spec and should be added.
9. Security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. No transmission over the internet is completely secure, so we cannot guarantee absolute security.
10. Complaints
If you are unhappy with how we have handled your personal data, please contact us first so we can try to put it right.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.