Privacy Policy
1. Who we are
Cindr ("we", "us") operates cindrapp.com and the Cindr fire risk assessment software. We are the controller of the personal data described in this policy. Cindr is a UK-based business.
Email us at info@cindrapp.com
2. Definitions
In this policy, the following terms have the meaning given below, consistent with UK GDPR.
- Personal Data means any information relating to an identified or identifiable living individual.
- Controller means the organisation that decides how and why personal data is processed. Cindr is the controller for the data described in this policy.
- Processor means an organisation that processes personal data on behalf of a controller, under its instructions. The third parties listed in the "Who we share it with" section act as processors on our behalf where relevant.
"We", "us", and "our" refer to Cindr. "You" and "your" refer to the individual whose personal data this policy describes.
3. What data we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, company name, email address | Responding to enquiries and demo requests | Legitimate interest / pre-contractual steps |
| Message content submitted via the contact form | Understanding your requirements before onboarding | Legitimate interest |
| Name, email address and chosen time slot when you book a demo | Scheduling and holding the demo call | Pre-contractual steps at your request |
| Usage data (pages visited, time on page) | Improving the product and landing page | Legitimate interest |
We do not collect special category data (health, financial, biometric, or similar).
4. How we use your data
We use the information you submit through the contact form or the demo scheduler for the following purposes.
- Respond to your enquiry and arrange a demo if you have asked for one
- Set up your account and free report allocation if your firm decides to go ahead
- Send occasional product updates relevant to your use of Cindr (you can opt out at any time by emailing us)
We will never sell your data, use it for unrelated marketing, or share it with third parties except as described in section 6.
5. How long we keep it
Contact form submissions and demo booking details are retained for up to 24 months or until you ask us to delete them, whichever is sooner. If you do not go on to use Cindr, we will delete your data within 90 days of your enquiry unless you have asked us to keep you informed about the product.
6. Who we share it with
Your data may be processed by the third-party services we rely on to operate. These are listed below.
- Resend (email delivery). Contact form submissions are routed through Resend's API to deliver your message to us. Resend is GDPR-compliant and processes data in the EU and UK.
- Calendly (demo scheduling). Our "Book a demo" scheduler is provided by Calendly. If you open it, Calendly receives your IP address and, if you complete a booking, the name, email address and any details you enter. Calendly is a US-based provider. Its transfer of personal data from the UK is governed by Standard Contractual Clauses together with the UK International Data Transfer Addendum, Calendly's contractual mechanism for lawful transfers from the UK. See Calendly's privacy notice.
We do not share your data with any other third party without your explicit consent, and we never sell it.
7. Cookies and tracking
This website does not use analytics cookies or advertising trackers, and we do not profile visitors.
The one exception is our demo scheduler. When you open "Book a demo", a script and booking window are loaded from Calendly, which may set its own cookies and receives your IP address. This only happens if you actively open the scheduler. It does not load when you simply browse the site. If you would rather not use it, you can contact us by email or through the contact form instead.
We may introduce privacy-respecting analytics (e.g. Plausible) in future and will update this policy if we do.
8. Your rights under UK GDPR
You have the following rights.
- Access. You can request a copy of the personal data we hold about you.
- Rectification. You can ask us to correct inaccurate data.
- Erasure. You can ask us to delete your data (the right to be forgotten).
- Restriction. You can ask us to limit how we use your data.
- Portability. You can receive your data in a machine-readable format.
- Object. You can object to processing based on legitimate interest.
To exercise any of these rights, email info@cindrapp.com. We will respond within one calendar month.
9. Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
10. Changes to this policy
We may update this policy as the product evolves. Material changes will be communicated to account holders by email. The "Last updated" date at the top of this page will always reflect the current version.