Last Updated: October 2026
Privacy Notice
Who are we and what do we do?
This privacy policy explains how Censony Ltd. uses personal data when we decide why and how it is processed. How Censony uses personal data when acting as a controller for its website and business relationships.
Invariably, when providing services to our corporate clients (building, testing, hosting or supporting software), we may have access to personal data held in that client’s systems. In that situation, the client is the data controller and Censony acts as their data processor. We only use that data on the client’s documented instructions and covered by a data processing agreement. We do not use personal data in that context for our own purposes, including our marketing. If your data is held in a system we work on for a client, that client’s privacy notice explains how your data is used. Please contact them directly to exercise your rights. If you contact us, we will pass your request to the relevant client.
As part of providing services to you, and your visiting and interacting on our website, we collect, use and are responsible for certain personal data about you. When we do so we are subject to the UK General Data Protection Regulation and Data Protection Act 2018 and other relevant and applicable data protection and privacy legislation, such as the EU General Data Protection Regulation (EU GDPR) if you are based in EU / EEA (the Data Protection Legislation).
Censony Ltd (trading as Censony) is a company registered in England and Wales under company number: 13856009. Our address is 12 Vyner Street, York, England, YO31 8HS (we, us, our).
Information we collect
In addition to information provided directly by you, we may receive personal data from:
Your employer organisation
Colleagues or marketing outreach service providers who identify you as a relevant contact
Payment, identity, communications and account-management providers
Event organisers, referral partners and professional advisers
Publicly available websites and professional profiles
Security, fraud-prevention and technical service providers
LinkedIn, including through LinkedIn Sales Navigator
The personal data we process about you broadly fall into the following main categories:
Category | Types of personal data | Collected from | Purpose | Lawful basis |
Sales and business enquiries | Name, business contact details, organisation, role, correspondence, messages, meeting notes, requirements, communication preferences. Approximate location, professional background, LinkedIn Profile URL, business email address, notes of interactions | You, your organisation, referrals, events and professional or publicly available sources (including LinkedIn Navigator that is connected to our CRM (Hubspot)) | Respond to enquiries, arrange demos and meetings, prepare proposals, develop and manage business relationships, maintain accurate records of communications | Steps requested before entering into a contract; legitimate interests for developing and managing our business; consent where required. |
Clients and service communications and support
| Name, job title, business contact detail of client staff, project communications, meeting notes, access credentials for systems we work on, invoicing and payment details Your professional social media / online presence, such as LinkedIn. Details relating to the products and services we provide to you, including nature of your enquiries, complaints, support tickets, including service-related communications with you, you/your organisation’s billing, payment and banking details, audio / video recordings, such as of calls and virtual meetings | You or your employer organisation, during the customer relationship Publicly available resource, such as Companies House
| Provide support and training, answer questions, diagnose problems, communicate operational, security and contractual information | Performance of a contract; legitimate interests and those of the relevant customer for supporting and security the service; compliance with legal obligation. |
Website and service usage | IP address, targeting characteristics (such as, industry, job role, company size, search terms), where applicable, hashed business email address for audience matching, website interaction data from tracking tags (pages visited, conversions), device and browser identifiers, approximate location derived from IP address, time stamps, pages and features used, cookie identifiers and security events. | Our website, through tags and cookies We collect this from your browser, device and our service providers. | Operate and secure our website and services; prevent misuse; diagnose faults; understand performance and use; improve navigations consent and services. | Legitimate interests for operating, securing and improving our services; consent where required for cookies and similar technologies (including analytics and tracking) |
Marketing preferences and opt-outs, events | Name, business email address, preferences, date, time, method and source of consent or opt-out, hashed email address for suppression, photos | You directly, through forms, unsubscribe links, emails or conversations, marketing platforms reporting unsubscribes | Send relevant product and service information; invite to events; measure and improve campaigns, maintain suppression records | Consent where required; otherwise legitimate interests for business-to-business marketing and developing our service. You may opt out at any time. |
Suppliers and subcontractors | Name, job title, business contact details, bank details (sole traders), contract and performance records | You or your employer organisation | Establish and administer the supplier relationship; communicate about the service; maintain records of communications | Performance of a contract |
Billing and administration | Customer/supplier billing contact details and related information including tax information. | You, your organisation | Process payments and maintain financial records; prevent fraud; manage disputes | Performance of a contract; compliance with legal obligations; legitimate interests in processing and managing payments |
Legal, regulatory and accounting | Any of the above, where relevant | Our records | Protect people, systems and information; investigate suspected misuse; establish, exercise and defend legal claims; comply with law and regulatory requirements. | Legitimate interests for protecting our business and users; compliance with legal obligations; establishment, exercise or defence of legal claims. |
We may combine information collected through these activities where the purposes are compatible. If we intend to use personal data for a materially different purpose, we will provide appropriate information before doing so.
We do not intentionally collect special category of data (such as health information, biometric data) through our website, marketing or as part of the services provided to you. Our website, corporate services and marketing are directed primarily to organisations and business users, not children. If you believe that a child has provided personal data directly to Censony for our own marketing or business purposes without appropriate authority, contact hello@censony.com
Marketing and Advertising
We may use your personal data to send you updates (such as by email, text message, telephone, post or social media channels) about our services, including exclusive offers, promotions or new services.
We have a legitimate interest in using your personal data for marketing purposes. This means we do not usually need your consent to send you marketing information.
In all cases you have the right to opt out of receiving marketing communications at any time by:
contacting us at hello@censony.com; or
using the ‘unsubscribe’ link in emails; or
change your cookies settings as described in our Cookie Policy.
We may ask you to confirm or update your marketing preferences if you ask us to provide further services in the future, or if there are changes in the law, regulation, or the structure of our business.
We do not sell your data. Where you accept marketing (analytics and advertising) cookies, LinkedIn and Google receive information about your visit as described below.
Cookies and similar technologies
Our website uses cookies and similar technologies, including the LinkedIn Insight Tag and Google Ads and Google Analytics tags.
For more information on cookies, please see our cookie policy here: Cookie Policy | How Censony Collects Cookies.
Web tracking and analytics
We use the following products and services, provided by Google Ireland Limited, Dublin, Ireland.
Google Tag Manager (GTM)
We use GTM to centrally manage and implement analytics and marketing tags on our website. GTM does not set any cookies itself. When our website loads, your browser connects to Google’s servers to load GTM. This means that Google receives your IP address and basic technical information about your browser. GTM then runs only the tags you have agreed to, in line with your choices in our cookie banner.
Website analytics (Google Analytics (GA) and Google Signals (GS)
GA
We use GA, a web analytics service on our website loaded through GTM .
If you accept analytics cookies, GA sets cookies on your device collects information about your visit. This includes the pages you view, the actions you take, your approximate location (based on your IP address), and your browser and device type.
If you reject analytics cookies, GA does not set or read any cookies on your device. However, because we use a Google feature called Consent Mode in its ‘advanced’ setting, your browser will still send limited information to Google when you visit a page. This is called a ‘ping’. It includes information such as a timestamp, browser user agent, page URL, referrer, whether an ad was clicked, and your consent status. These pings do not contain a cookie identifier.
You can object to the collection and processing of your data by GA at any time. You can find an opt-out option at: Google Analytics Opt-out Browser Add-on Download Page. Further information on data processing by Google can be found at: Privacy Policy – Privacy & Terms – Google.
GS
If you accept analytics cookies, we also use GS, a feature of GA. For GS, by giving your consent you allow Google to link your visit data with information from your Google account (provided that you are logged in and have enabled ad personalisation). This allows Google to identify you based on this data and use it for its own purpose, such as personalise ads on other service. Google also uses this information alongside information linked to your Google account, in line with Google’s own privacy policy and your Google account settings. We use aggregated, anonymised insights (received from Google) solely to better understand the general characteristics of our website audience. All data we receive from Google, is anonymised and aggregated so we cannot identify you personally.
You can control the use of GS at any time via the Google account settings: Google - My Activity. Further information on data processing by Google can be found at: Privacy Policy – Privacy & Terms – Google.
LinkedIn Insight Tag (used in LinkedIn Campaign Manager)
If you accept marketing cookies, we use LinkedIn Insight Tag from LinkedIn Ireland Unlimited Company, Dublin, Ireland (LinkedIn) on our website. By integrating JavaScript tag, you as a user of our website may be shown interest-based advertisements (ads) when visiting the social network LinkedIn or other websites that also use this process. We also receive statistics about website visitors and their demographic characteristics. In addition, we can analyse your use of our LinkedIn advertising and your interest in our offers using a conversion tracking function and display LinkedIn ads to you through retargeting on other websites. The aim is to measure and optimise the effectiveness of our LinkedIn advertising campaigns and measure conversions.
By integrating the LinkedIn Insight Tag, a direct connection to LinkedIn’s servers is automatically established when you visit our website and have consented to marketing cookies. LinkedIn receives information that you have accessed the corresponding page of our website or clicked on one our advertisements. If you are registered with LinkedIn, LinkedIn can link your visit to your account. Even if you are not registered or logged in, LinkedIn can collect certain information about your visit and link it to your actions. The LinkedIn Insight Tag enables the collection of data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent) and timestamp.
LinkedIn also processes your personal data in the United States, relying on the EU-US Data Privacy I I Framework (including the UK Extension) to ensure the protection of your data in accordance with the Data Protection Legislation. In addition, we have agreed on standard data protection clauses with LinkedIn to ensure an adequate level of data protection in third countries.
Deactivation of the LinkedIn Insights Tag and further options to object to advertising can be found in the LinkedIn ad settings in your LinkedIn account Advertising data and additional here: Ads unsubscribe. Information on data processing at LinkedIn can be found here: LinkedIn Privacy Policy
For GTM, Google Analytics and LinkedIn Insights Tag, the legal basis for processing is your consent through our cookie banner.
You can revoke your consent at any time by emailing us at hello@censony.com without affecting the lawfulness of the processing until revocation.
International transfers
Both Google and LinkedIn processes your personal data in the United States, relying on the EU – US Data Privacy II Framework (including UK extension) to ensure that the protection of your data in accordance with the Data Protection Legislation. In addition, we have agreed on standard data protection clauses with LinkedIn to ensure an adequate level of data protection in third countries.
Artificial Intelligence (AI)
We are committed to providing excellent and innovative services, including through use of new and developing technologies. We are using a number of AI solutions which may result in your personal data being uploaded to and/or processed through the AI solution. We have carried out due diligence in relation to our AI providers, to ensure that all environments into which your personal data is uploaded are safe and secure. We also require our AI providers commit to complying with Data Protection Legislation.
We intend to upload your personal data to the AI solution on the grounds of our legitimate interests in providing your with the best possible service, and we will only upload the data that is strictly necessary for us to use the AI solution. If we decide not to continue to use the AI solution, we will ensure your personal data is promptly deleted from it. If we continue to use the AI solution your personal data will remain on it as long as we use the solution to provide services to you, and thereafter in line with the retention periods set out in this policy.
Who we share your personal data with
We may share personal data with:
service providers, suppliers and subcontractors who help us deliver our services and run our business, such as IT and hosting infrastructure providers, website hosting, CRM, payment providers, marketing agencies, HR companies and law firms
cloud-based service delivery tools, such as cloud hosting, project management, video calls and messaging, email service providers (including Microsoft and Hubspot)
LinkedIn and Google, see ‘Cookies and similar technologies’ and ‘Web Tracking and Analytics’
Advisers, auditors, insurers, banks and prospective investors or purchasers subject to appropriate confidentiality arrangements
Regulators, courts, law-enforcement bodies and other recipients where disclosure is required or permitted by law
A successor or relevant participant in a merger, acquisition, financing, reorganisation or sale of all or part of our business
We require service providers to protect personal data and use it only for the agreed purpose.
Where your personal data is held
We a fully remote business and we use a number of cloud-based stack to help us to process the information we collect. Some of these may be based outside the UK and EEA. Whenever we transfer your personal data, we implement the following safeguards where applicable:
we only transfer personal data to a country that ensures an adequate level of protection of personal data (UK or EU adequacy arrangements); or
there are appropriate safeguards in place (such as Data Privacy Framework certification including the UK / EU Extension where relevant; standard contractual data protection clauses published or approved by the relevant data protection regulator), together with enforceable rights and effective legal remedies for you; or
a specific exception applies under data protection law.
How long your personal data will be kept
We will keep your personal data for as long as reasonably necessary for the relevant purpose, including to provide services, maintain security and audit records, comply with legal obligations and establish or defend claims. To work out what is reasonably necessary, we will consider:
the nature and sensitivity of the personal data we hold as well as our relationship with you;
the purposes for which we process your personal data and whether we can achieve those purposes through other means; and
the applicable legal, regulatory, tax, accounting, reporting and any other relevant requirements.
In particular:
cookie and similar technology periods are described our Cookie Policy, or relevant control. For example, where applicable, Google Signals data is set to 14 months.
marketing information is retained while it remains relevant, unless you opt-out; we may retain a minimal suppression record to honour an opt-out.
Security
We use appropriate technical and organisational measures to keep your personal data confidential and secure from unauthorised access, use and disclosure. These include access controls, password managers, encryption in transit and at rest and staff confidentiality.
We require our business partners, suppliers and other third parties to implement appropriate security measures to protect personal data from unauthorised access, use and disclosure.
We also have procedures to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are required to do so.
Automated Decision-Making
Censony does not ordinarily use the personal data covered by this Policy to make solely automated decisions that have legal or similarly significant effects on website visitors, business contacts or Censony customer administrators. If we introduce significant automated decision-making for a Controller activity, we will provide meaningful information about the information used, the rationale and likely consequences, together with applicable safeguards and rights.
Your rights
You may have rights to:
Request access to your personal data (a subject access request) that we hold about you
Request correction to correct or delete personal data you think is inaccurate or incomplete
Request erasure of your personal data (also known as the right to be forgotten) to delete your personal data
Request restriction of processing to limit how we use your personal data
Request a data transfer to ask that we transfer the personal data you gave us to another organisation or to you
Object to processing in certain ways (such as direct marketing or where we rely on legitimate interest bases and if the processing impacts your fundamental rights and freedoms)
Rights in respect of automated decision-making meaning that you have a right not be subject to solely automated decisions that affect your legal status or rights.
Withdraw your consent at any time
Complain to a data protection regulator.
These rights are not absolute and may depend on the processing and lawful basis.
Please note that we may need to take appropriate steps including making enquiries of you to help us confirm aspects such as your identity and to ask further information about your rights request.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
If you would like to exercise any of those rights, please contact: hello@censony.com.
Generally, we will respond to your rights requests without undue delay and within one calendar month of receiving the request. Occasionally it could take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.
You may unsubscribe from marketing emails using the link in the message. We may still send necessary service, security or contractual communications.
Your right to complain about our processing
You can make a privacy complaint by emailing: hello@censony.com. We will acknowledge receipt a complaint within 30 days of receiving it and will take steps to investigate and respond to the complaint without undue delay.
Please note that we may need to take appropriate steps including making enquiries of you to help us confirm aspects such as your identity and to ask further information about your complaint so that we may speed up our response.
You may also complain to the Information Commission (the UK data protection regulator, also known as the ICO), or to another competent supervisory authority.
The contact details for the ICO are:
Information Commission’s Office
4th Floor
No. 3 Circle Square
5 Hawkshaw Street
Manchester
M1 7BL
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Updating your personal data
We take reasonable steps to ensure your personal data remains accurate and up to date. To help us with this, please let us know if any of the personal data you have provided to us has changed, such as your surname or address - see below ‘How to contact us’.
How to contact us
Our contact details are shown below:
Address: 12 Vyner Street, York, England, YO31 8HS
Email: hello@censony.com
Changes to this notice
We review this notice regularly and may update it to reflect changes in our services, practices, or legal obligations. We will update the date above, and where the change is material, provide appropriate additional notice. Please check this page frequently for updates.