Privacy policy

Last updated: 7 October 2025

City Edge Ltd (“City Edge”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This policy explains what we collect, how we use it, and the rights you have. It applies to:

visitors to cityedge.uk,

people who contact us (e.g., by phone, WhatsApp, email, or web forms),

our prospective and current commercial clients and their staff,

job applicants and our workers/contractors.

1) Who we are (Data Controller)

City Edge Ltd

Company number: 15375668

Address: 20 Wenlock Road, London, N1 7GU, United Kingdom

Email: info@cityedge.uk

Website: cityedge.uk

Phone / WhatsApp: 07403544877

2) Personal data we collect

a) Website visitors

Technical data: IP address, device and browser type, operating system, pages viewed, time on site, referring pages.

Usage data: interactions with our website (e.g., clicks, scrolls, navigation).

Cookies: see Cookies & similar technologies below.

b) Enquiries & prospects

Identity & contact data: name, job title, company, email, phone/WhatsApp, postal address.

Communications: the content of your messages and any attachments.

Preferences: service requirements, site access instructions, preferred times, billing preferences.

c) Clients & suppliers

Contract & billing data: purchase orders, service specifications, key contact details, work logs, invoices, payment details (limited—processed via our payment providers), credit notes.

Operational data: site access information, risk assessments, incident reports, service quality notes.

d) Job applicants & workers

Recruitment data: CVs, application forms, qualifications/certifications, right-to-work documents, interview notes, references.

Employment/engagement data (for successful candidates): contact details, emergency contacts, contracts, training records, schedules, timesheets, payroll identifiers (bank details held securely), performance and H&S records.

We do not intentionally collect special category data unless necessary (e.g., health & safety incidents). Where we do, we will apply additional safeguards and a suitable lawful basis.

3) How we use personal data (purposes)

Responding to enquiries and preparing quotes.

Providing and managing services, including scheduling, onsite coordination, and quality control.

Account management and billing, including invoicing and credit control.

Recruitment and onboarding, including right-to-work checks and training records.

Health & Safety and incident management, including insurance notifications.

Website operation, security, and analytics (to understand and improve how our site is used).

Legal and regulatory compliance, including record-keeping and responding to lawful requests.

4) Our lawful bases (UK GDPR)

Depending on the context, we rely on one or more of:

Contract – to take steps at your request before entering into a contract and to perform a contract with you.

Legitimate interests – to run and protect our business, improve our services and website, prevent fraud, and communicate with you about our services (balanced against your rights).

Consent – for certain marketing communications or optional cookies/analytics (where used). You can withdraw consent at any time.

Legal obligation – to meet our duties under UK law (e.g., tax, employment, H&S).

Vital interests – very rarely, to protect life (e.g., serious H&S incidents).

5) Cookies & similar technologies

We use essential cookies to make our website work (e.g., page navigation, basic functions).

If we use analytics (e.g., to measure visits and improve the site), these will be non-essential cookies and we will ask for your consent where required. You can change your browser settings to block or delete cookies. Blocking some cookies may impact site functionality.

If you add or remove analytics/marketing tools in future, update this section with the tool name, purpose, and retention (e.g., “Google Analytics – aggregate usage statistics – up to 24 months”).

6) Sharing your data

We may share personal data with:

Service providers acting on our instructions (e.g., IT hosting, CRM, email, messaging, analytics, accountants, payroll, background checks).

Professional advisers (e.g., lawyers, insurers, auditors, bankers).

Authorities and regulators (e.g., HMRC, law enforcement) when required by law.

Business transfers: in the event of a merger, restructure or asset sale, your data may be transferred as part of the transaction, under appropriate safeguards.

We require recipients to keep data secure and to use it only as instructed by us.

7) International transfers

Some providers may be located outside the UK. Where that happens, we ensure appropriate protections are in place, such as UK adequacy regulations or International Data Transfer Agreements/Standard Contractual Clauses plus supplementary measures where needed.

8) Data retention

We keep personal data only for as long as necessary for the purposes described above, including to satisfy legal, accounting, or reporting requirements. Typical retention periods:

Enquiries/quotes: up to 24 months from last contact.

Client records, contracts, invoices: 6–7 years (statutory requirements).

H&S and incident records: as required by law (often 3–6 years, longer for serious incidents).

Recruitment (unsuccessful): up to 12 months unless you consent to a longer period.

Employee/contractor records and payroll: 6–7 years after engagement ends (or longer where legally required).

9) Keeping your data secure

We use administrative, technical, and physical safeguards to protect personal data, including access controls, secure storage, staff training, and confidentiality obligations with our service providers. No system is completely secure; if we become aware of a personal data breach that poses a risk to you, we will act promptly and, where required, notify you and the ICO.

10) Your rights (UK GDPR)

You have the right to:

Access your personal data and receive a copy.

Rectify inaccurate or incomplete data.

Erase your data (where applicable).

Restrict or object to processing, including to processing based on legitimate interests and to direct marketing.

Data portability (for data you provided to us that we process by automated means based on consent or contract).

Withdraw consent at any time where processing is based on consent.

To exercise your rights, contact info@cityedge.uk

. We may need to verify your identity. There is no fee unless requests are manifestly unfounded or excessive.

11) Marketing

We may contact business contacts about services that may be relevant to their role. You can opt-out at any time by using the unsubscribe instructions in the message or by contacting us at info@cityedge.uk

12) Third-party links

Our website may contain links to third-party websites or services we do not control. If you follow those links, their privacy policies will apply.

13) Children

Our services are intended for business customers. We do not knowingly collect data relating to children.

14) Changes to this policy

We may update this policy from time to time. The latest version will always be posted on this page with the “Last updated” date shown at the top.

15) Contact us or make a complaint

Questions or requests about this policy or your personal data:

Email: info@cityedge.uk

| Phone/WhatsApp: 07403544877 | Post: City Edge Ltd, 20 Wenlock Road, London, N1 7GU, UK

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). See ico.org.uk or call 0303 123 1113.