How It Works | Pricing | Contact | Privacy Policy

Privacy Policy

SalesUnblocker.com website is owned by Credwell Limited.

1. Introduction

Welcome to Credwell Ltd, trading as "The Sales Unblocker" (“we,” “us,” “our”). We are committed to protecting and respecting your privacy.

This policy explains how we collect, process, and protect your personal data when you visit our website (www.salesunblocker.com) or engage our compliance consultancy services.

Credwell Ltd is the data controller responsible for your personal data.

  • Company Number: 09833757

  • Registered Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

  • Contact Email: compliance@credwell.co.uk

2. What Data We Collect About You

We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:

  • Identity Data: First name and last name.

  • Contact Data: Work email address and telephone numbers.

  • Professional Data: Company name, job title, business industry, and the primary business need or driver for your project enquiry (including details submitted regarding your security questionnaires).

  • Financial Data: Billing address and payment details (Note: Payment card details are processed securely and directly by our payment gateway, Stripe; we do not store full card numbers on our systems).

  • Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, operating system, and other technology on the devices you use to access this website.

  • Usage Data: Information about how you use our website and services.

How we collect this data:

  • Direct interactions: You may provide Identity, Contact, and Professional Data by filling in forms on our website (e.g., our Contact Form or Triage Booking) or by corresponding with us by email or video call.

  • Automated technologies: As you interact with our website, we automatically collect Technical Data about your equipment and browsing actions using cookies. (Please see our Cookie Policy for further details).

3. How We Use Your Personal Data & Our Lawful Basis

Under UK data protection law, we will only use your personal data when the law allows us to. We process your data under the following lawful bases:

  • To Respond to Your Enquiries (e.g., Contact Forms, Triage Calls): * Lawful Basis: Legitimate Interests (to respond to your queries, manage our relationship, and grow our business).

  • To Perform a Contract (e.g., Delivering consultancy services, processing questionnaires): * Lawful Basis: Performance of a Contract with you (or taking steps at your request prior to entering into a contract).

  • To Process Payments and Manage Invoicing: * Lawful Basis: Performance of a Contract and compliance with our Legal Obligations (tax and accounting rules).

  • To Administer and Protect Our Website: * Lawful Basis: Legitimate Interests (for provision of administration and IT services, network security, and fraud prevention).

4. Who We Share Your Data With (Sub-Processors)

We absolutely do not sell your personal data. To operate our business and deliver our services efficiently, we share your data with trusted third-party service providers acting as our processors. These include:

  • Website Hosting: Hostinger (hosts our website and contact forms).

  • Secure Storage & Email: Microsoft Corporation (provides our Enterprise-grade, end-to-end encrypted Vault and email infrastructure).

  • AI Processing Assistance: Google Workspace (used in a ring-fenced environment; your data is never used to train public AI models).

  • Invoicing & Accounting: Xero.

  • Payment Processing: Stripe.

  • Digital Signatures: PandaDoc (used for signing Statements of Work).

All third parties are legally bound to respect the security of your personal data and treat it in accordance with the law. They are only permitted to process your personal data on our strict instructions.

5. International Data Transfers

Some of our external third-party processors (such as Stripe or Google) are based outside the UK or the European Economic Area (EEA). Therefore, the processing of your personal data may involve a transfer of data outside the UK/EEA.

Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Government.

  • Where we use specific service providers, we use specific contracts approved for use in the UK (such as the International Data Transfer Agreement / Standard Contractual Clauses) and rely on the EU-U.S. Data Privacy Framework (DPF) where applicable, which give personal data the same protection it has in the UK.

6. Data Security

As a consultancy led by a qualified Data Protection Officer (CIPP/E), security is our core priority. We have implemented appropriate, enterprise-grade technical and organisational security measures (including an encrypted Microsoft 365 Vault and dual-cloud architecture) to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed.

Access to your personal data is strictly limited to employees, agents, and subcontractors who have a business need to know.

7. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

  • Prospective Clients: Enquiries that do not convert to a contract will be retained for 24 months after our last interaction.

  • Active Clients: Data is retained for the duration of our commercial relationship and for six years thereafter to comply with UK legal and tax obligations.

8. Your Legal Rights

Under UK data protection law, you have the following rights regarding your personal data:

  • Right of access: Request copies of your personal information.

  • Right to rectification: Request correction of incomplete or inaccurate information.

  • Right to erasure: Request deletion of your personal information in certain circumstances.

  • Right to restriction of processing: Request the suspension of processing of your data in certain scenarios.

  • Right to object to processing: Object to processing of your personal data where we are relying on a legitimate interest.

  • Right to data portability: Request the transfer of your data to you or a third party.

To exercise any of these rights, please contact us at: compliance@credwell.co.uk

9. How to Complain

If you have any concerns about our use of your personal information, you can raise it with us directly at compliance@credwell.co.uk.

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

  • ICO Helpline: 0303 123 1113

  • Website: www.ico.org.uk

  • Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF