Privacy Policy – SEC Holdings LTD trading as CaRM

Last Updated: 1 December 2025

1. Introduction

SEC Holdings LTD trading as CaRM (“we”, “us”, “our”) is committed to protecting your

personal data.

This Privacy Policy explains how we collect, use, and protect your information under the UK

GDPR and Data Protection Act 2018.

2. Data Controller and Data Processor Roles

We act as:

 Data Controller – for personal data collected through our website, enquiries, billing,

and internal operations.

 Data Processor – when managing CRM data, social media accounts, or marketing

assets on behalf of a client.

A Data Processing Agreement (DPA) is used when required.

3. Data We Collect

We may collect:

 Contact details – name, email, phone, address

 Business information – company name, industry, role

 Billing information – invoicing and payment details

 Usage data – IP address, browser type, pages visited

 Marketing and campaign data – engagement interactions, analytics

 Platform access data – login credentials provided for campaign management

(secured and encrypted)

4. How We Use Your Data

We use your data to:

 Provide and manage services

 Respond to enquiries

 Process payments

 Improve website performance

 Manage marketing campaigns

 Send updates or communications with your consent

 Comply with legal obligations

We do not sell personal data.

5. Legal Basis

We process data under:

 Contract performance

 Legitimate interests

 Legal obligations

 Consent where required

6. Sharing Your Data

We may share data with:

 Trusted service providers

 Hosting, analytics, or IT suppliers

 Payment processors

 Legal or regulatory authorities where required

 Third-party platforms necessary for service delivery

Data is never sold.

7. International Data Transfers

Where data is transferred outside the UK, we use lawful safeguards such as:

 UK International Data Transfer Agreement (IDTA)

 Standard Contractual Clauses (SCCs)

 Adequacy decisions

8. Automated Processing and Profiling

Some marketing and analytic tools use automated profiling (e.g., audience segmentation).

You have the right to request human review or object to profiling.

9. Your Rights

You have the right to:

 Access your data

 Correct inaccuracies

 Request deletion

 Object to processing

 Restrict processing

 Withdraw consent

 Data portability

Contact: info@carm.world

10. Data Retention

We only keep data as long as necessary for service delivery, legal compliance, or legitimate business needs.

Data is securely deleted or anonymised when no longer required.

11. Security

We use strict technical and organisational measures to protect your data, including: encryption, access controls, and secure storage.

12. Cookies

Our website uses cookies for:

 Functionality

 Analytics

 Personalisation

 Advertising (where applicable)

See our Cookie Policy for full details.

13. Data Breach Notification

If a data breach occurs that may impact your rights and freedoms, we will notify you and the ICO as required by law.

14. Children’s Data

We do not knowingly collect data from individuals under 16. If such data is discovered, it will be deleted.

15. Third-Party Links

We are not responsible for the privacy practices of external websites.

16. Updates

We may update this Privacy Policy.

Continued use of our website or services constitutes acceptance of changes.

17. Contact

SEC Holdings LTD trading as CaRM

Newminster House, 27–29 Baldwin Street, Bristol BS1 1LT

0333 577 5707

info@carm.world