Privacy Policy

1. Who We Are

CQC Mock Audit is a trading name operated by Melanie Jonas Mhango. Our registered address is 23 King Street, Cambridge, CB1 1AH, England. For any data protection queries, contact us at melanie@cqcmockaudit.co.uk.

2. What Information We Collect

We may collect the following personal information when you interact with our website or services:

Information you provide directly: Your name, email address, organisation name, service type, and any message content you submit via our booking system (Calendly) or lead magnet download forms.

Information collected automatically: Your IP address, browser type, device information, pages visited, time spent on pages, and referring website. This is collected through cookies and similar technologies.

Information from third parties: If you book a call via Calendly, we receive the information you provide to them including your name, email, and answers to booking questions.

3. How We Use Your Information

We use your personal information for the following purposes:

To respond to your enquiries and provide our services; to schedule and prepare for discovery calls; to send you relevant information you have requested (such as our CQC Readiness Checklist); to improve our website and user experience; to comply with legal obligations; and to send occasional marketing communications where you have given consent.

4. Legal Basis for Processing

Under UK GDPR, we process your data based on: your consent (for marketing emails and cookie usage); performance of a contract or steps taken at your request before entering a contract (for service enquiries); and our legitimate interests (for website analytics and business improvement).

5. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your data with: Calendly (scheduling platform); our email service provider (for sending requested resources); website hosting providers; and analytics providers (such as Google Analytics). All third-party processors are bound by data protection agreements.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is retained for up to 24 months. Marketing consent records are retained for as long as you remain subscribed. Website analytics data is retained for up to 26 months.

7. Your Rights

Under UK GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict processing; data portability; and withdraw consent at any time. To exercise any of these rights, email us at melanie@cqcmockaudit.co.uk.

8. Cookies

Our website uses cookies. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our website uses SSL encryption for all data transmission.

10. International Transfers

Some of our third-party service providers may be based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions).

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page.

12. Contact & Complaints

If you have questions about this policy or wish to make a complaint, contact us at melanie@cqcmockaudit.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.