Privacy Policy

Last updated: August 2026

1. Who we are

CIS Ltd operates the CIS Store and is the data controller. This policy explains how CIS handles personal data under the UK GDPR and Data Protection Act 2018.

2. What we collect

CIS may collect account details, order activity, security information, consented anonymous visitor analytics, and optional account personalisation activity. The store is for business use and is not intended for children.

3. How we use your data

Data is used to provide accounts, process orders, manage pricing and records, secure the store, improve the service with consent, and provide optional portal suggestions. CIS does not sell personal data or use it for third-party marketing.

4. Who we share it with

Data is shared only where needed with service providers, distributors, carriers, professional advisers, or authorities. Providers are contractually required to protect it.

5. Cookies

Essential cookies support sign-in and sessions. With consent, a pseudonymous identifier supports aggregated visitor analytics. CIS does not use advertising or cross-site tracking cookies.

6. How long we keep it

Account and order records are kept while the business relationship continues and afterwards for legal, accounting, and warranty needs, typically for up to 6 years.

7. Your rights

You may request access, correction, deletion, restriction, objection, or data portability through your CIS account manager or helpdesk, and may complain to the Information Commissioner’s Office.

8. Changes to this policy

CIS may update this policy. Significant changes will be flagged in the store and the revision date appears above.