Privacy Notice – Website Users

Create Business Opportunities Limited (and its associated companies, together referred to as “Create”, “we”, “us” or “our”) is committed to protecting your personal data and respecting your privacy.

This Privacy Notice explains how we collect, use, store and protect personal data when you:

• Visit our website(s)
• Contact us via forms, email or telephone
• Subscribe to updates or marketing communications

This notice applies to individuals, including sole traders and contacts at limited companies.

1. Who we are

Data Controller: Create Business Properties Limited
Registered address: Unit One, 40 Peffer Place Castlebrae Business Centre, Edinburgh EH16 4BB

Email: info@createbusinessproperties.com

If you have any questions about this notice or how we use your data, please contact us using the details above.

2. What personal data we collect

We may collect and process the following types of personal data:

• Name
• Business name (where applicable)
• Email address
• Telephone number
• Postal address
• Enquiry details and correspondence
• IP address and basic technical information
• Marketing preferences

We do not knowingly collect special category data via our website.

3. How we collect your data

We collect personal data when you:

• Complete a website form
• Contact us by email or phone
• Subscribe to communications
• Use our website (via cookies and similar technologies)

4. Lawful bases for processing

Under UK GDPR, we rely on the following lawful bases:

• Contract: Where processing is necessary to respond to enquiries or provide services you request
• Legitimate interests: To operate, improve and secure our website and services, and to communicate with business contacts
• Consent: Where you opt in to receive marketing communications
• Legal obligation: Where we are required to retain information for legal or regulatory reasons

5. How we use your data

We use personal data to:

• Respond to enquiries and requests
• Provide information or services
• Improve our website and user experience
• Send marketing communications (where permitted)
• Maintain website security

6. Marketing communications

We may send marketing communications to business contacts where permitted under UK GDPR and PECR, or where you have given consent.

You can opt out of marketing at any time by:

• Using the unsubscribe link in our emails
• Contacting us at info@createbusinessproperties.com

7. Cookies

Our website uses cookies and similar technologies. Non-essential cookies will only be used with your consent.

For full details, please see our Cookie Policy.

8. Sharing your data

We do not sell personal data.

We may share data with trusted third-party service providers who process data on our behalf (e.g. IT, hosting, marketing platforms). All processors are subject to contractual confidentiality and data protection obligations.

9. International transfers

Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as International Data Transfer Agreements (IDTAs) or equivalent protections.

10. Data retention

We retain personal data only for as long as necessary:

• Enquiry data: up to 24 months
• Marketing data: until you opt out
• Legal or financial data: as required by law

11. Your rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request erasure of your data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent at any time

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk

12. Changes to this notice

We may update this Privacy Notice from time to time. The latest version will always be available on our website.

Last updated: [29 January 2026]