Privacy policy
Controller and contact
The controller is Sascha Wittig, trading as Centurion Compliance (sole trader).
5d High Street, St Albans AL3 4ED, United Kingdom.
Email: sascha.wittig@icloud.com · Telephone: +447537144472.
Information and purposes
If you contact us by email or WhatsApp, we use the information you provide to respond, consider a proposed engagement and keep a record of the conversation. The lawful basis is taking steps at your request before a contract, and our legitimate interest in managing business correspondence.
The website contact form prepares a message in your email application. It does not send the form to the website or store its contents. You can review the draft before sending it.
Service providers
Vercel hosts the website and may process request and diagnostic data to deliver and secure it. Resend may process business email content and delivery data when used to send or handle enquiry-related email. If you choose WhatsApp, Meta Platforms Ireland Limited and its group companies process the message under WhatsApp’s terms and privacy information.
Vercel Analytics measures site usage only after you accept optional analytics. It is not loaded before consent. You can change your choice at any time using Cookie settings in the footer.
Retention
Email enquiry messages are kept for 24 months after the last substantive contact, unless a longer period is required to establish, exercise or defend legal claims or to meet a legal obligation.
Technical and server logs are kept for 30 days. WhatsApp messages remain subject to the retention and deletion controls in the relevant WhatsApp account and Meta’s policies; we do not set a separate fixed retention period for messages held in WhatsApp.
International transfers
Vercel, Resend and Meta may process information outside the UK or European Economic Area. Where required, transfers rely on an applicable adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum. You may request further information using the contact details above.
Your rights and complaints
Depending on the law that applies, you may request access, rectification, erasure, restriction, portability or object to processing. Where processing is based on consent, you may withdraw consent at any time; this does not affect earlier processing. You may also complain to the UK Information Commissioner’s Office or the Hessian Commissioner for Data Protection and Freedom of Information.
Updates
This notice was last updated on 14 November 2026. We will update it if our processing practices change.