Privacy notice

This notice explains who we are, what personal data we collect, why we use it, who we share it with and what rights you have. It covers our website, our enquiries and marketing, the people who work with us as clients and suppliers, and people who apply to work with us.

Who we are

We are Conosco Ltd, a business-to-business provider of managed IT, cybersecurity, consultancy and telecommunications services. We do not sell services to the public.

We are the data controller for the personal data described in this notice. Where we process personal data on behalf of our clients as part of the services we provide to them, we do so as their processor, under our data processing agreement, and our client’s own privacy notice applies.

Our contact details are at the end of this notice.

What we collect and why

Who you are	What we collect	Why we use it	Our lawful basis
Website visitor	Pages viewed, the site that referred you, country and device type, a few actions such as clicking our phone number or sending a form, and the words you search for on our site, without identifying you; your cookie choices, stored on your device	To see which pages are useful, what visitors look for, and keep the site working	Legitimate interests
Someone who fills in a form on our website (enquiry, assurance pack, assessment, resource download)	Name, work email, phone, organisation, role, your message or answers, and the campaign that brought you to the site if you allowed third-party content	To reply, send what you asked for and follow up about our services	Legitimate interests, or consent where we ask for it on the form
Someone who receives our marketing	Name, work email, organisation, role and the content you have shown interest in	To send news and offers relevant to your business	Legitimate interests for business contacts, or consent where the law requires it; you can unsubscribe at any time
Client contact	Name, work contact details, role, communications with us and service records	To provide and manage our services, and for billing	Contract, and legitimate interests
Supplier or subcontractor	Name, work contact details, communications, and bank details where needed for payment	To manage the services you provide to us and to pay you	Contract, and legitimate interests
Supplier or subcontractor we are assessing	Information needed for the assessment, such as skills, qualifications and right to work, explained to you at the time	To confirm suitability before we engage you	Legitimate interests, legal obligation, or consent where we ask for it
Job applicant	Your CV, covering note and anything you send us, and notes from the recruitment process	To consider your application and keep in touch about suitable roles	Steps before a contract, and legitimate interests

We will never sell your personal data.

Cookies

Our website uses only the cookies and similar technologies needed for it to work, unless you agree to more. Third-party content, such as our enquiry forms and videos, loads only with your permission. Our cookie policy lists what we use and how to change your choices at any time.

We share personal data only where we need to, with:

Service providers who process it for us, under contract and on our instructions. For our website these are:
- Pipedrive: our customer relationship management system, which runs our website forms and holds enquiries and contacts.
- Vercel: our website hosting and visitor analytics. Analytics sets no cookies and does not identify you.
- Google reCAPTCHA: protects our forms from spam, and loads with the form once you allow third-party content.
To run our business we also use Microsoft 365 for email and documents, including CVs sent to us by email, and our service management and accounting systems, all under the same kind of contract.
Services whose content appears on our website, only once you allow third-party content: YouTube (videos), BlockMark (our Assurix certificate) and SecurityScorecard (our security rating). They may set their own cookies under their own policies.
Our business partners, subcontractors and professional advisers, such as auditors and lawyers, where needed to deliver a contract or run our business.
A buyer or seller of our business or assets, if that happens, under the terms of this notice.
Regulators, law enforcement or others where the law requires us to.

Where your data is processed

We process personal data in the UK. Some of our service providers process data outside the UK, including in the European Economic Area and the United States. Where they do, we make sure the transfer is protected by UK adequacy regulations or by appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

For example, Pipedrive holds our customer relationship data in its UK or European Union data centres; the UK recognises the EU as adequate. Vercel, which hosts our website, is a US company: transfers to it are covered by the UK Extension to the EU-US Data Privacy Framework, with the UK Addendum to the standard contractual clauses in its data processing agreement as a further safeguard.

How we protect it

We hold personal data securely, with access limited to the people who need it. We are certified to ISO 27001 for information security, and data sent to and from our website is encrypted in transit using TLS.

How long we keep it

We keep personal data only for as long as we need it for the purpose we collected it for, and then delete or anonymise it, unless the law requires us to keep it for longer.

Data	How long we keep it
Website enquiries and form submissions	As long as we need to deal with your enquiry and follow up, after which we review it and delete what we no longer need
Marketing contacts	Until you unsubscribe, or until we remove you after a period without engagement
Job applications and CVs	Until the recruitment process ends, unless you ask us to keep it for future roles
Client and supplier records	For the length of the contract, then 6 years after the end of the current tax year, for legal, tax and accounting purposes

Your rights

You have the right to:

ask for a copy of the personal data we hold about you;
ask us to correct it if it is wrong or incomplete;
ask us to delete it, in some circumstances;
ask us to restrict how we use it, in some circumstances;
object to our using it based on legitimate interests, and to direct marketing at any time;
receive it in a portable format, in some circumstances;
withdraw your consent at any time, where we rely on consent. Every marketing email includes an unsubscribe link.

To use any of these rights, contact us using the details below. We will reply within one month.

Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk.

Contact us

Conosco Ltd, The Plaza, 535 Kings Road, Chelsea, London SW10 0SZ

Registered in England and Wales, company number 04509301. VAT registration number GB 345 3384 95.

Our trademarks include Conosco, Managed Computing and Managed Computers.

Changes to this notice

We may update this notice from time to time. Any changes will be posted on this page, with the date below.

This notice was last updated on 14 November 2026.