Privacy policy

Last updated: 26 October 2026.

This policy explains what personal data Cast Iron CAD Ltd collects through this website, cic.engineering, why we collect it, who handles it for us, how long we keep it and what rights you have.

Who we are

Cast Iron CAD Ltd is the data controller for personal data collected through this website. We are registered in England and Wales, company number 07353071, and registered with the Information Commissioner’s Office under number ZC127592.

Registered office: Studio 01, Plus X Innovation Hub, Lewes Road, Brighton, BN2 4GL.

Contact: info@castironcad.com or 01273 252523.

What we collect and why

When you send an enquiry. The contact and scoping forms ask for your name and email address, and optionally your company and phone number, plus your message. The scoping form also asks where your project sits on the ten stages, your timeline, a budget range and the technical complexity. We use this to reply to you and, if you ask us to, to prepare a scoping conversation and a written project estimate. Our lawful basis is our legitimate interest in answering enquiries, and taking steps at your request before entering into a contract.

When you email or phone us. We keep what you send us for the same purposes and on the same basis.

When you visit the website. Our web server records each request: the IP address, the date and time, the page requested, the page you came from and your browser type. We use these logs to run and secure the website and to count visits. Our lawful basis is our legitimate interest in operating a secure website. We do not use the logs to identify you or combine them with other information. The visit statistics we produce from them contain no personal data.

We do not use your data for marketing unless you ask us to, we do not sell it, and we do not use advertising or tracking services.

Cookies

This website does not set cookies and does not load analytics or advertising scripts from other companies. See the cookie policy.

Who handles your data for us

We use the following service providers. Each acts on our instructions under a contract that protects your data.

• Vultr hosts our web server and our form-processing service in London, UK.
• Notion Labs stores the enquiries you send through the website forms.
• Anthropic provides an AI service that checks each new enquiry for spam. It receives your name, email address, the project stage you chose and your message, and returns a classification only. The classification sorts our list of enquiries. We do not make decisions that have legal or similarly significant effects on you by automated means. Enquiries marked as likely spam are kept, not deleted, and a person checks them from time to time.
• Microsoft provides our email, which we use to receive enquiry notifications and to reply to you.
• Namecheap forwards email sent to our cic.engineering addresses to our mailbox.

Transfers outside the UK

Notion Labs, Anthropic, Microsoft and Namecheap may process data in the United States. Where your data leaves the UK, these safeguards apply:

• Notion Labs and Microsoft are certified under the UK Extension to the EU-US Data Privacy Framework, which UK law recognises as giving adequate protection.
• Anthropic has agreed to the Information Commissioner’s International Data Transfer Addendum to the EU standard contractual clauses, as part of its data processing terms.
• Namecheap includes standard contractual clauses in its data processing terms.

How long we keep it

• Enquiries that do not become a project: 24 months from our last contact, then deleted. This includes enquiries marked as likely spam.
• Form-processing records: our form service keeps a working record of each submission, including what you typed, for 14 days, then deletes it automatically.
• Client and project records: for the engagement and the archive period agreed with you, and accounting records for six years, as UK law requires.
• Web server logs: 90 days, then deleted.

Your rights

You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. To use any of these rights, email info@castironcad.com. We will reply within one month.

If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Security

The website is served over an encrypted connection, enquiry data is held only in the services named above, and access is limited to the people who need it to reply to you or deliver your project.

Changes to this policy

When this policy changes, we will update it here and change the date at the top.