Brikxsol Ltd, registered in England and Wales, company number 17472977. Registered office: 15 Roche Close, Leicester, LE2 9NB, United Kingdom.
Corpcats is a trading name of Brikxsol Ltd, a private limited company registered in England and Wales under company number 17472977, with its registered office at 15 Roche Close, Leicester, LE2 9NB, United Kingdom (“Corpcats”, “we”, “us”, “our”).
We provide outsourced business support to UK firms, including administration, social media management, digital marketing, website development, workflow automation, business process design, and staffing and payroll support.
We provide outsourced business support to UK firms, including administration, social media management, digital marketing, website development, workflow automation, business process design, and staffing and payroll support.
| Detail | Information |
|---|---|
| Legal entity | Brikxsol Ltd (trading as Corpcats) |
| Company number | 17472977 |
| Registered office | 15 Roche Close, Leicester, LE2 9NB, United Kingdom |
| Privacy contact | mahamriaz@corpcats.com |
| ICO registration number | [ZBxxxxxxx] |
| Website | www.corpcats.com |
Much of our work involves handling personal data on behalf of our clients, for example when we carry out administration, CRM updates or marketing for a mortgage or protection broker. In that work our client is the controller and we are a processor. We only process that data on our client’s documented instructions under a written data processing agreement that meets Article 28 UK GDPR.
If you are a customer of one of our clients, that client’s privacy notice explains how your data is used, and you should send any requests about it to them. If you contact us directly, we will pass your request to the relevant client without delay.
| Category | Examples |
|---|---|
| Identity and contact data | Name, job title, employer, business email address, telephone number, postal address. |
| Client account data | Contract details, service records, correspondence, meeting notes, instructions you give us. |
| Financial data | Financial data Billing details, invoices, payment history, bank details for paying or receiving payment (we do not store full card numbers). |
| Marketing data | Your marketing preferences and your responses to our emails and campaigns. |
| Technical data | IP address, browser type, device information, pages visited and time on site, collected through cookies (see Part C). |
| Recruitment and contractor data | CVs, references, right to work evidence, bank details and tax information for people who work with or for us. |
| Enquiry and complaint data | Anything you tell us when you contact us, use our forms, or make a complaint. |
We do not intentionally collect special category data (for example health data) about our own contacts. If it is needed, for example to make reasonable adjustments for a contractor, we will only process it where a condition under Article 9 UK GDPR and Schedule 1 DPA 2018 applies.
| Purpose | Lawful basis (Article 6 UK GDPR) |
|---|---|
| To respond to enquiries and provide quotes | Legitimate interests; steps prior to entering a contract |
| To deliver our services and manage your account | Performance of a contract |
| To invoice, take payment and recover debtsa | Performance of a contract; legitimate interests |
| To keep accounting and tax records | Legal obligation |
| To send B2B marketing about our services to business contacts | Legitimate interests (you can object at any time) |
| To send electronic marketing to individual or sole trader subscribers | Consent, or the soft opt in under regulation 22 PECR where you are an existing customer |
| To run, secure and improve our website | Legitimate interests; consent for non essential cookies |
| To recruit and engage staff and contractors | Steps prior to a contract; legal obligation (right to work, tax) |
| To handle complaints and legal claims | Legitimate interests; legal obligation |
Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for details of that assessment.
We share personal data only where necessary, and only with:
All our suppliers that process personal data for us are bound by written contracts requiring them to keep it secure and use it only on our instructions.
Some of our team and service providers are based outside the UK, including in Pakistan. Where personal data is transferred to a country that does not benefit from UK adequacy regulations, we put an appropriate safeguard in place under Article 46 UK GDPR, normally the ICO’s International Data Transfer Agreement or the International Data Transfer Addendum to the EU Standard Contractual Clauses, supported by a transfer risk assessment. Access is limited to what is needed for the task and is made through our secured systems. You can ask us for a copy of the safeguards we use.
| Data | Retention period |
|---|---|
| Client contracts and service records | 6 years after the end of the contract (Limitation Act 1980) |
| Accounting and tax records | 6 years from the end of the financial year they relate to (Companies Act 2006, s.388; HMRC) |
| Client data we process as a processor | As set out in the client's data processing agreement, then deleted or returned |
| Marketing contacts | Until you opt out, or 2 years without engagement |
| Enquiries that do not proceed | 12 months |
| Unsuccessful job and contractor applications | 6 months after the decision |
| Complaint records 3 years after the complaint is closes | 3 years after the complaint is closed |
We use appropriate technical and organisational measures, including multi factor authentication, role based access, encrypted devices and connections, Microsoft 365 security controls, staff confidentiality agreements and regular access reviews. If a personal data breach occurs that is likely to result in a risk to you, we will notify the ICO within 72 hours where required, and tell you without undue delay if the risk is high.
Under the UK GDPR you have the right to:
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
To exercise any right, email mahamriaz@corpcats.com. We will respond within one month, which may be extended by up to two further months for complex requests. We will carry out reasonable and proportionate searches and may ask you to verify your identity. There is normally no fee.
If you are unhappy with how we have handled your personal data, please tell us first using the data protection complaints process in Part B, section 6. This includes our online complaints form at [www.corpcats.com/complaints]. We will acknowledge your complaint within 30 days, as required by section 164A of the DPA 2018.
You also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk, telephone 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. The ICO will usually expect you to have raised the complaint with us first.
We review this policy at least annually. The latest version is always on our website, and the date at the top shows when it last changed.
Share a few details and we’ll be in touch with a tailored approach.