CMC Software & AI
Legal

Privacy Policy

Last updated: 6 August 2026

1. Who we are

CMC Software & AI is a software development and consultancy business operated by Callum McCann, based in the United Kingdom. We build custom software, AI solutions, apps and digital products for founders and businesses.

For the purposes of UK data protection law, Callum McCann (trading as CMC Software & AI) is the data controller. You can contact us at: [email protected]

2. What data we collect

We may collect the following personal data when you use our website or contact us:

  • Contact information — your name and email address when you submit our contact form or reach out directly.
  • Enquiry details — the nature of your enquiry and any message content you provide.
  • Usage data — standard server logs including IP address, browser type, pages visited and timestamps. This data is used solely for security and operational purposes.
  • Communications — records of any emails, WhatsApp messages or other correspondence between us.

We do not use tracking cookies, advertising pixels or third-party analytics scripts on this website.

3. How we use your data

We use your personal data to:

  • Respond to your enquiries and communicate with you about potential or ongoing projects.
  • Provide the software development and consultancy services you have requested.
  • Comply with our legal obligations.
  • Protect the security and integrity of our systems.

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

  • Legitimate interests — responding to enquiries and managing client relationships.
  • Contract performance — processing data necessary to deliver services you have engaged us for.
  • Legal obligation — where we are required to process data to comply with UK law.

5. How long we keep your data

We retain contact enquiry data for up to 2 years from the date of last contact. Client project data is retained for up to 7 years to comply with UK tax and accounting obligations. You may request deletion at any time (see Section 7).

6. Who we share your data with

We do not sell, rent or trade your personal data. We may share data with trusted third-party service providers who assist us in operating our business (for example, cloud hosting providers), but only where they are bound by appropriate data processing agreements. We will never share your data with third parties for marketing purposes without your explicit consent.

7. Your rights

Under UK GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — request deletion of your personal data where there is no compelling reason for us to continue processing it.
  • Restriction — ask us to restrict processing of your data in certain circumstances.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

10. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

← Back to home