Privacy Policy

Last updated: 29 September 2026

This policy explains what personal information Chief CX collects, why, and what rights you have. We keep it short and plain on purpose.

1. Who we are

Chief CX (“we”, “us”, “our”) is a customer experience consultancy based in the United Kingdom. We’re responsible for the personal data described in this policy.

Contact for anything privacy-related: hello@chiefcx.com

2. What we collect, and why

When	What we collect	Why	Lawful basis (UK GDPR)
You visit our website	Basic technical data your browser sends (such as IP address and browser type), handled by our hosting provider for security and to deliver the site	To run and protect the website	Legitimate interests
You book a Free CX Consultation (via Cal.com)	Name, email, company and website, your answers to the booking questions, and the meeting time	To arrange and prepare for the call, and follow up afterwards	Legitimate interests / steps before a contract
You email or message us (including on LinkedIn)	Your name, contact details and what you tell us	To reply and keep a record of our conversation	Legitimate interests
We reach out to you as a potential client	Business contact details and publicly available information about your business (such as your website, LinkedIn profile or public reviews)	To send you a relevant, personal note about your customer experience	Legitimate interests (you can ask us to stop at any time)
You become a client	Contact details for you and your team, billing details, and the information you share for the work	To deliver the engagement, manage invoices and keep proper records	Contract / legal obligation
You share data about your customers or staff for our work	Whatever you choose to share (for example support transcripts or feedback)	Only to deliver the agreed work	We act as your processor, on your instructions (see our Terms of Business)

We don’t collect special category data (such as health information or political views), and we don’t knowingly collect data from children.

We never sell your data or share it for advertising.

3. Who we share it with

We only use trusted providers that help us run the business:

Cal.com: booking and scheduling
Google Workspace: email, calendar, video calls (Google Meet) and file storage (Google Drive)
Stripe and our bank: invoicing and payments (we never see or store full card details)
Lyrical Host: website hosting and security for chiefcx.com
Professional advisers: such as an accountant, where needed

We may also share information if the law requires it.

4. International transfers

Some providers (for example Google and Cal.com) may process data outside the UK, including in the United States. When that happens, we rely on the safeguards recognised under UK data protection law, such as UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the International Data Transfer Agreement.

5. How long we keep it

Enquiries and consultation bookings that don’t become work: up to 2 years, then deleted.
Client project files and data you shared for the work: for the length of the engagement, then deleted or returned within 3 months of it ending, unless you ask us to delete it sooner.
Invoices and financial records: 6 years, as required for UK tax purposes.
Outreach notes: if we reach out and you don’t want to hear from us, we keep only a minimal note so we don’t contact you again.

6. Cookies

Our website doesn’t use analytics, advertising or tracking cookies. It only uses cookies that are strictly necessary for the site to work, such as security and login cookies for site administrators.

Our booking calendar is provided by Cal.com. If you use it, Cal.com may set cookies needed for the booking to work. See Cal.com’s own privacy policy for details.

If we add analytics or other non-essential cookies in future, we’ll update this policy and ask for your consent first.

7. Your rights

Under UK data protection law, you can:

ask for a copy of the personal data we hold about you;
ask us to correct it or delete it;
object to or ask us to restrict how we use it, including asking us to stop contacting you;
ask for your data to be transferred to you or someone else, where applicable;
withdraw consent at any time, where we rely on consent.

Email hello@chiefcx.com. We’ll respond within one month.

If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

8. Keeping your data safe

We use reputable, secure providers, two-factor authentication on key accounts, and access limited to the people who need it. No system is ever completely secure, but we take reasonable steps to protect your information.

9. Changes to this policy

We’ll update this page if anything changes, and show the date of the latest version at the top.