Privacy Notice

Celtis Solutions Limited respects your privacy. This notice explains how we collect, use, store and share personal information when you visit our website, contact us, engage with our communications, or register for and participate in our events and other public-facing activities. It also explains how third-party platforms support these activities and the choices and rights available to you.

1. Purpose and scope

This is our public-facing privacy notice. It covers the activities described here whether your information is collected directly through our website, through a platform we use, or during subsequent communications with us. Celtis Solutions Limited ("Celtis", "we", "us" or "our") is the controller where we decide why and how personal information is used for these activities.

2. Who is the Data Controller for your data?

Please contact us with questions about this notice, requests to exercise your rights or concerns about our use of personal information.

Company: Celtis Solutions Limited

Company number: SC618832

Registered Address: 4a Glenfinlas Street, Edinburgh, Scotland, EH3 6AQ

Website: celtis.co.uk

Email: office@celtis.solutions

For written enquiries, please contact us at our registered address.

3. What personal information do we collect?

Depending on your interaction with us, we may collect:

Identity, contact and professional details: your name, email address, telephone number, organisation, job title and relevant business contact details.
Enquiries and communications: information you submit through forms, emails or other communications, together with our responses and relevant follow-up records.
Event information: registration details, attendance, practical communications and feedback relating to our events, workshops or webinars.
Technical and usage information: IP address, browser and device information, relevant technical logs, and information collected by website technologies described in section 6).
Preferences and engagement records: cookie choices, marketing preferences, consent and opt-out records, and relevant records of communications or responses.
Public professional information: limited information from business websites or professional networking profiles where used for relevant and lawful business outreach.

We collect only information needed for the relevant purpose. Please avoid including sensitive personal information in a general enquiry. If an activity requires information such as accessibility or dietary requirements that may reveal sensitive information, we will explain its use and the applicable legal basis and additional conditions when collecting it.

4. How do we obtain information?

We may obtain personal information:

From you: when you visit the website, submit an enquiry, contact us, register for an event, provide feedback or choose to receive updates.
Through platforms used for our activities: for example, but not limited to, registration details made available to us when you book a Celtis event through Eventbrite.
From your organisation or relevant business contacts: where they introduce you or provide your details for a relevant professional interaction.
From public professional sources: where the use is fair, relevant and lawful.
Through cookies and similar technologies: as described in section 6 and subject to applicable consent requirements.

Where information comes from another source, we provide the required privacy information within the applicable legal time frame unless a lawful exemption applies.

You can contact us to ask about the source of information we hold about you.

5. How do we use information and what are our lawful bases?

Purpose	Data	Lawful basis
Responding to enquiries and managing communications To reply to your requests, discuss your requirements and follow up where appropriate.	Identity and contact details (e.g. name, email, phone number, job title, organisation) Enquiry and communication records (e.g. message content, communication history)	Legitimate interests: responding to enquiries and maintaining professional relationships. Contract: where you ask us to take steps before entering a contract with you personally.
Running events, workshops and webinars To manage bookings, attendance, practical arrangements and feedback.	Identity and contact details (e.g. name, email, organisation, job title) Registration and attendance records Feedback and survey responses	Contract: where needed to fulfil your booking. Legitimate interests: organising and running our events.
Meeting dietary and accessibility needs at events To make suitable arrangements for you at the event.	Optional dietary and accessibility requirements, which may reveal information about your health or religious beliefs	Explicit consent, given on the registration form. This information is optional and does not affect your booking. We share it only with those who need it, such as the venue or caterer, and delete it within 30 days after the event. You can withdraw consent at any time.
Marketing and professional outreach To share information about our services, content and events.	Identity and contact details (e.g. name, email, organisation, job title) Marketing preferences (e.g. opt-in and opt-out status)	Consent: where required by electronic marketing rules or where you have opted in. Legitimate interests: promoting relevant services and events to business contacts, where the law allows. You can opt out at any time.
Running and protecting our website For site functionality, troubleshooting, security and preventing misuse.	Technical data (e.g. IP address, browser type, device information, access logs) Cookie data (see section 6)	Legitimate interests: keeping our website reliable and secure.
Managing your preferences and meeting legal requirements To respect and show we respect your choices, and to meet our legal obligations.	Identity and contact details (e.g. name, email) Opt-out and suppression records Legal and compliance records	Legal obligation: where the law requires it. Legitimate interests: keeping suppression lists so we don’t contact you again after you opt out, and establishing or defending legal claims.

Purpose

Data

Lawful basis

Responding to enquiries and managing communications

To reply to your requests, discuss your requirements and follow up where appropriate.

Identity and contact details (e.g. name, email, phone number, job title, organisation)

Enquiry and communication records (e.g. message content, communication history)

Legitimate interests: responding to enquiries and maintaining professional relationships.

Contract: where you ask us to take steps before entering a contract with you personally.

Running events, workshops and webinars

To manage bookings, attendance, practical arrangements and feedback.

Identity and contact details (e.g. name, email, organisation, job title)

Registration and attendance records

Feedback and survey responses

Contract: where needed to fulfil your booking.

Legitimate interests: organising and running our events.

Meeting dietary and accessibility needs at events

To make suitable arrangements for you at the event.

Optional dietary and accessibility requirements, which may reveal information about your health or religious beliefs

Explicit consent, given on the registration form. This information is optional and does not affect your booking. We share it only with those who need it, such as the venue or caterer, and delete it within 30 days after the event. You can withdraw consent at any time.

Marketing and professional outreach

To share information about our services, content and events.

Identity and contact details (e.g. name, email, organisation, job title)

Marketing preferences (e.g. opt-in and opt-out status)

Consent: where required by electronic marketing rules or where you have opted in.

Legitimate interests: promoting relevant services and events to business contacts, where the law allows. You can opt out at any time.

Running and protecting our website

For site functionality, troubleshooting, security and preventing misuse.

Technical data (e.g. IP address, browser type, device information, access logs)

Cookie data (see section 6)

Legitimate interests: keeping our website reliable and secure.

Managing your preferences and meeting legal requirements

To respect and show we respect your choices, and to meet our legal obligations.

Identity and contact details (e.g. name, email)

Opt-out and suppression records

Legal and compliance records

Legal obligation: where the law requires it.

Legitimate interests: keeping suppression lists so we don’t contact you again after you opt out, and establishing or defending legal claims.

When we rely on legitimate interests, we check that the processing is necessary and proportionate, and that it doesn’t override your interests, rights and freedoms. Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that took place before you withdrew it.

6. Cookies

Cookies are small text files stored on your device when you visit a website.

Some cookies are strictly necessary to enable core site functionality. We refer to these as “necessary” cookies. For example, necessary cookies are required to enable the basic features of this site, such as adjusting your consent preferences. These cookies do not store any personally identifiable data.

Other cookies allow us to understand how visitors interact with the website and make your interactions with our Website more meaningful. We refer to these as “analytics” cookies. For example, we may use analytics cookies to determine whether you have visited our Website before and inform us about site features in which you have interest, thereby permitting us to better tailor our Website content. Analytics cookies also allow us to analyse Website traffic so we can measure and improve performance and speed up your searches.

Cookie	Provider	Purpose	Duration
Session cookie (random ID)	Celtis website	Keeps your connection to the site stable and secure	Session
Cookieyes-*	CookieYes	CookieYes sets this cookie for consent solution management.	1yr
_ga	Google Analytics	Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.	1 year 1 month 4 days
_ga_*	Google Analytics	Google Analytics sets this cookie to store and count page views.	1 year 1 month 4 days
_cs_c	ContentSquare	The cookie is used by Content Square to save the user consent to be tracked.	1 year 1 month
_cs_id	ContentSquare	This cookie is used to store the ContentSquare's user identifier ID. This is a persistent cookie and expires after 13 months.	1 year 1 month
_cs_s	ContentSquare	This cookie is used to store the number of page's viewed by a visitor within the session for ContentSquare's solution.	1 hour

You can review your choices at any time using the Cookie Preferences link at the bottom of each page. You can also block or delete cookies in your browser settings; see www.allaboutcookies.org for help. If you block necessary cookies, parts of the site may not work properly.

If we introduce other cookies, we will ask for your consent first and update this section.

7. Third-party platforms and service providers

We use third-party services to support our website, communications, information storage and event activities. Personal information may be collected through these services or transferred to them for the purposes described in this notice.

Key providers include:

Host Europe GmbH: for hosting our website, which runs on Joomla.
Google Workspace: for email, correspondence, documents and cloud storage supporting enquiries and relevant communications.
Notion: for organising and storing business contact, enquiry and event administration records where those records are managed in Notion.
Eventbrite: for registration, attendee information and administration of events managed through that platform.
Social media service: including LinkedIn.
Mattermost: for internal team communication and collaboration.
CookieYes: for managing cookie consent on our website.

Other recipients may include hosting, IT and security providers, and authorised contractors. We may also disclose relevant information to professional advisers, regulators or public authorities where necessary for advice, legal claims or a legal obligation.

8. Links, embedded content and third-party activities

Our website may link to or incorporate services operated by other organisations. Information you submit through a platform for a Celtis activity may be received and used by Celtis as described in this notice, as well as being processed by the platform under its own arrangements. Visiting an unrelated third-party website is subject to that organisation's privacy notice.

9. International transfers

Some of the service providers we use, such as Google, Notion and Eventbrite, may store or access personal information outside the UK, including in the European Economic Area and the United States. When this happens, we make sure the transfer is protected by a safeguard recognised under UK data protection law, such as UK adequacy regulations (including the UK–US Data Bridge) or the UK International Data Transfer Agreement or Addendum. You can contact us for more information about these transfers or to request a copy of the relevant safeguards.

10. Retention and security

We keep personal information only for as long as we need it. As a default:

Enquiries and correspondence: up to 2 years after our last contact, unless the enquiry leads to an ongoing business relationship.
Event registrations: up to 12 months after the event, for administration and feedback. Dietary and accessibility information: deleted within 30 days after the event.
Marketing contacts: kept until you unsubscribe, or for up to 2 years with no engagement.
Website and cookie data: see section 6 for more details.

We may keep information longer if we need it to meet a legal obligation or to deal with a dispute. When we no longer need it, we securely delete or anonymise it.

We protect your information with appropriate technical and organisational measures, including access controls, authentication and secure cloud platforms. Only people who need it for their role can access it.

11. Your rights and choices

Depending on the circumstances and lawful basis, you may have rights to access, correct, erase or restrict the use of your information; receive certain information in a portable format; object to processing based on legitimate interests. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

You can object to direct marketing at any time, including related profiling. Where we rely on consent, you can withdraw it at any time by contacting us. Necessary enquiry or event communications are separate from marketing.

Rights are subject to applicable conditions and exemptions. Contact us at office@celtis.solutions to make a request or complaint. We may need to verify your identity and will respond within the applicable legal timeframe.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator. You do not have to contact us before exercising that right.

ICO website: https://ico.org.uk/

12. Whether information is required

You do not generally need to provide contact details simply to browse our website. Where information is needed, required fields will be identified or explained. Without it, we may be unable to respond or complete the requested activity.

13. Changes to this notice

We may update this notice as activities or legal requirements change; the latest version will always be on our website with an updated date, and we will highlight significant changes as needed.

Last updated 19 October 2026.