Privacy Policy

Who we are and how to contact us

Castle Stonebridge Limited (company number 13634490) is responsible for the personal information you provide through this website. Our registered address is Sunny Bank, 12 Albion Road, Chesterfield, United Kingdom, S40 1LJ.

For privacy questions or to exercise your data rights, email advice@castlestonebridge.co.uk or telephone 01246 308249. You can also write to us at our registered address.

Information you provide

Enquiry and callback forms collect your name, email address, telephone number and the message or contact preferences you choose to provide. Employer enquiries may also include business details, your role and the services you are interested in.

If you submit a financial health check, protection assessment or quote enquiry, the information sent may include the financial circumstances, cover requirements and assessment results shown in that journey. Please do not send medical records, identity documents, bank details or other sensitive documents through a general enquiry form.

Calculator inputs are used to produce the illustration you request. What is sent with a submitted enquiry depends on the tool. Viewing an illustration is not the same as requesting regulated personal advice.

Why we use your information

We use enquiry information to respond, arrange a conversation and take steps at your request before providing a service. We may also have a legitimate interest in managing enquiries, protecting our website against abuse and maintaining business records, subject to your rights. Where a journey asks for consent, you can withdraw that consent by contacting us; withdrawal does not affect processing already lawfully carried out.

A later advice or product application may require further information and separate privacy information. We will not treat accepting optional website analytics as permission to send you marketing.

Optional analytics and browser storage

Optional first-party analytics runs only after you accept it. It records visited page paths, page titles, referral domains, campaign labels, device category and limited website interactions. Financial answers and enquiry contents must not be included in analytics events.

Your browser stores your analytics choice in local storage and, after acceptance, a visit identifier in session storage. The server derives a monthly pseudonymous visitor identifier from connection information; it does not store the raw IP address or user-agent in the analytics record. Pseudonymous data is not necessarily anonymous data.

The business-protection tool also saves progress and contact details in your browser so you can return to the assessment on the same device. Avoid using it on a shared device. You can remove locally saved information by clearing this website's stored site data in your browser.

You can decline optional analytics or change your choice using Manage cookies. Declining does not stop you using the website or submitting an enquiry. Necessary security and staff sign-in features may use separate browser storage or cookies.

Service providers and external resources

Our website uses hosted infrastructure, including Replit, to operate the website and store enquiries and files. Staff authentication uses Clerk. Providers may process connection, security or service information necessary to operate those features. Our pages also request fonts from Google Fonts; that provider receives the connection information needed to deliver them.

External links and third-party content are subject to the relevant provider's privacy information. If an enquiry develops into an advice service, we will explain any relevant sharing with our principal firm or other providers as part of that service. We do not sell your enquiry information. We may disclose information where required by law or necessary to protect legal rights.

Some service providers may process information outside the UK. Contact us for information about the relevant provider arrangements and safeguards for your information.

Retention and security

Retention depends on why information was collected, whether an enquiry becomes a client relationship, and applicable legal or regulatory record-keeping requirements. Contact us to ask which retention period applies to your information or to request deletion where available. Information may need to be retained to meet a legal obligation or deal with a complaint or legal claim.

Website connections use HTTPS and access to enquiry records is restricted to authorised staff. No internet service can guarantee absolute security. Please contact us if you have a concern about information submitted through this website.

Your rights and complaints

Depending on the circumstances, UK data protection law gives you rights to access and correct your information, request erasure or restriction, object to certain processing and obtain a portable copy of information. You can withdraw consent where processing relies on consent. These rights have conditions and exceptions.

Contact us using the details above. You can also raise a data protection concern with the Information Commissioner's Office. The website footer explains the separate process for complaints about financial services.