Privacy Policy

Last updated: 14 September 2026

1. Who we are

Cesto Technologies ("Cesto Technologies", "we", "us" or "our") provides digital marketing, web development and software services. This policy explains how we handle personal data collected through this website, through our marketing, and in the course of providing services to our clients.

For data collected through this website and our own marketing, Cesto Technologies is the data controller. When we process data on behalf of a client — for example while managing their advertising account or building their application — we act as a data processor under that client's instructions and under a separate agreement.

2. What we collect

Information you give us

• Contact details — name, email address, telephone number, company name and website, submitted through our enquiry or subscription forms.
• Enquiry content — the description of your goals, budget indication and any documents you choose to send us.
• Correspondence — emails, call notes and messages exchanged with our team.

Information collected automatically

• Technical data — IP address, browser type and version, device type, operating system and screen size.
• Usage data — pages viewed, time on page, referring source and the links you click.

Information from third parties

• Publicly available business information used to research an enquiry before we reply.
• Analytics and advertising platforms, where you have consented to that processing.

3. How we use it

• To respond to your enquiry and prepare a proposal.
• To provide, administer and support the services you have engaged us for.
• To send the monthly email brief, where you have subscribed.
• To improve this website, our content and our service offering.
• To keep records required for accounting, tax and contractual purposes.
• To protect our systems and prevent fraud or abuse.

We do not sell personal data. We do not share your details with third parties for their own marketing.

4. Lawful basis for processing

Where data protection law requires a lawful basis, we rely on the following:

• Consent — for non-essential cookies and for marketing emails. You may withdraw consent at any time.
• Contract — to deliver services you have engaged us to provide, and to manage that relationship.
• Legitimate interests — to respond to business enquiries, secure our systems and improve our services, where those interests are not overridden by your rights.
• Legal obligation — to retain records required by tax, accounting and company law.

5. Cookies and analytics

This website uses a small number of cookies and similar technologies. Essential cookies are required for the site to function and cannot be switched off. Analytics cookies help us understand which pages are useful; where required by law, these are set only with your consent.

You can block or delete cookies through your browser settings. Doing so may affect parts of the site. Where we use third-party analytics or advertising platforms, those providers process data under their own privacy policies.

6. Sharing and processors

We share personal data only where necessary, and only with organisations bound by confidentiality and data-processing terms. Categories include:

• Hosting, email and cloud infrastructure providers.
• Analytics, advertising and marketing platforms.
• Project management, invoicing and accounting tools.
• Professional advisers, where required.
• Regulators or law enforcement, where we are legally required to disclose.

7. International transfers

We work with clients and suppliers in several regions, so personal data may be transferred outside your country of residence. Where that happens, we rely on an adequacy decision, standard contractual clauses, or another lawful transfer mechanism, and we take steps to ensure an equivalent level of protection.

8. How long we keep it

• Enquiries that do not proceed — up to 24 months, then deleted.
• Client records — for the duration of the engagement and up to 7 years afterwards, to meet contractual, tax and accounting obligations.
• Marketing subscriptions — until you unsubscribe, and a suppression record thereafter so we do not contact you again in error.
• Website analytics — in line with the retention period configured in the analytics platform.

9. Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls, least-privilege permissions, multi-factor authentication on business systems, and regular review of the tools we use. No transmission over the internet is completely secure, and we cannot guarantee absolute security — but we will notify you and any relevant regulator where a breach is likely to result in a risk to your rights.

10. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Request erasure of your data in certain circumstances.
• Restrict or object to processing, including direct marketing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with your local supervisory authority.

To exercise any of these, email contact@cestotechnologies.com. We will respond within the period required by applicable law, normally within one month. Where we process data on behalf of a client, we will refer your request to that client as the controller.

11. Children

Our services are directed at businesses. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The date at the top of this page shows when it was last revised. Material changes will be highlighted on this page, and where appropriate we will notify you directly.

13. How to contact us

Questions about this policy, or about how we handle your data, should go to contact@cestotechnologies.com, or by post to the registered address shown on our invoices and correspondence.