Who is responsible
CIELO 42 LTD is the controller of personal information used to operate BUSINESS PROOF. BUSINESS PROOF™ is a trading name of CIELO 42 LTD, Company No. 17471508, registered in England and Wales. Our registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
For privacy questions, requests or complaints, email support@getbusinessproof.com. You can also write to the registered office.
Visiting this website
This website presents the Assessment and related information. Purchases are completed through Shopify checkout. Customer sign-in remains closed; this website does not take payment details or Assessment answers through its pages.
For initial launch, BUSINESS PROOF has not enabled its own analytics or advertising tracking on these information pages. No Meta Pixel or equivalent advertising tracker has been introduced. If we introduce additional analytics or advertising technologies, we will review and update this notice, the cookie information and any required consent controls before using them. This does not mean that the complete hosting, checkout or account stack is cookie-free.
Requests for pages, images and video necessarily send technical information such as your IP address, browser information and the requested resource to the infrastructure delivering them. This enables delivery and security. The About film is served from Shopify’s video network. See Cookie information.
Contacting us
If you email us, we receive your email address, the content of your message and anything you attach, together with any name or order information you provide. We use it to respond and deal with the issue.
For purchase enquiries and contractual support, this is necessary to take steps you request before a contract or to perform it. For other enquiries and business correspondence, our legitimate interest is to respond and administer the business. Please send only information needed for your enquiry.
Orders, accounts and Assessment information
When you buy or use the Assessment, the relevant information can include your name and contact details, billing and delivery address, order and payment status, account/access records, support correspondence and the evidence and results you submit or generate in the Engine where these relate to an identifiable person.
We use the information needed to fulfil the order, arrange delivery, administer the included access and provide your Assessment and support. The legal basis is performing the contract or taking steps you ask for before it. Required information must be provided for us to carry out the relevant part of the service.
Payments are handled through the payment service used for the transaction. Payment-related information made available to us is used to reconcile orders, manage refunds and investigate payment issues. Please do not send card details by email.
The Engine applies the BUSINESS PROOF methodology to the evidence supplied to produce a GO | PIVOT | STOP result and explanation. This is guidance for your own decision, not a decision granting finance or guaranteeing a commercial outcome. Contact support if you have a question about your information or result.
Security, administration and legal duties
We use relevant records to deal with security incidents, suspected fraud, disputes and the administration of the business. Our legitimate interests are protecting customers and the service, maintaining reliable records and resolving problems; these interests must be balanced against your rights.
Where record-keeping, tax, regulatory or other legal duties require processing, the legal basis is compliance with a legal obligation. We do not use this notice as consent to send marketing.
Who receives information
Information needed to provide the relevant service is handled by providers of website hosting and technical infrastructure, email/customer communications and, for orders, payment, fulfilment and delivery services. Shopify provides the existing commerce platform and video delivery. Professional advisers or public authorities may receive relevant information where needed for legal duties or legitimate dispute handling.
Providers acting on our instructions must handle personal information under appropriate contractual arrangements. Where a provider uses information for its own purposes, its own privacy information also applies. You can read Shopify’s consumer privacy policy.
International handling
Shopify and other technical services can involve handling information outside the UK. UK data-protection rules require an appropriate legal basis for any restricted international transfer. Shopify describes its arrangements in its Data Processing Addendum.
Contact us for information about the locations and safeguards relevant to your information, including how to obtain a copy of applicable safeguards. This notice does not mean that every supplier uses the same transfer arrangement.
How long information is kept
Retention depends on why information is needed. Order and transaction records are kept for applicable accounting and legal obligations and relevant claims. Support correspondence is kept while needed to resolve the enquiry and deal with related issues. Account and Assessment records are kept while needed to provide the agreed access and handle related rights or disputes. Technical/security records are kept for the operational and security purpose concerned.
When information is no longer needed for these purposes, it should be deleted or made anonymous. You can ask about the retention criteria applying to your information.
Your rights
Depending on the circumstances, you can ask to access your information, correct it, erase it, restrict its use or receive a portable copy. Where processing relies on consent, you can withdraw that consent without affecting lawful use before withdrawal. Some rights are subject to legal exceptions, including where records must be retained.
You have the right to object to processing based on legitimate interests for reasons relating to your situation. You can object to direct marketing at any time.
Contact support to exercise a right. We may need proportionate information to confirm your identity. We will respond within the applicable legal timescale, normally one month, and explain any permitted extension.
Complaints
To raise a data-protection complaint, email support@getbusinessproof.com or write to our registered office and explain your concern. We will acknowledge it within 30 days, investigate without undue delay and tell you the outcome.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data-protection regulator.