Privacy policy

Introduction

This policy explains when, why, and how we collect personal information from people who visit our websites, register, purchase our products or services, or contact us in any other way. The policy also describes in detail the conditions under which we can disclose information to others and the methods we use to ensure its security.

While we encourage customers to read our privacy policy in full, we abide by several key principles:

• • • • We will never sell your data.
      • We will never share your marketing information with third parties.
      • We will always keep your personal data secure, using strong encryption, following data protection rules, and applying advanced security techniques.
      • We will never send you marketing materials without your consent. Our newsletter requires your explicit consent, and You can manage or withdraw your consent at any time by clicking the unsubscribe link in any marketing email. This link will redirect you to the Mailing Subscriptions section of our website, where you can choose which mailing lists you wish to subscribe to or unsubscribe from, or opt out of all marketing communications entirely.
      • The same subscription management options are also available in your personal account under My Account → Edit Information → My E-mail Subscriptions.
• If you have questions or concerns about how your personal data is collected or used, please contact us at feedback@c-mes.co.uk.

You can read our full privacy policy below.

About Us

C-MES Solutions Ltd. is registered at the following address: Unit 3, Office A, 1st Floor, 6-7 St. Mary At Hill, London, England, EC3R 8EE

Registration number: 11244685

This policy (together with our Product Delivery and Services Terms, the Billing Rules, and other documents referred to in it) sets the basis on which we will process any personal data that we collect from you or that you provide to us. Please read the following text carefully to understand our views and practices regarding your personal data and how we will handle it.

For the purposes of the Data Protection Act 1998 (the Act) and the GDPR (General Data Protection Regulation), the data controller is C-MES Solutions Ltd, a company incorporated in England and Wales with the number 11244685 and registered office at Unit 3, Office A, 1st Floor, 6-7 St. Mary At Hill, London, England, EC3R 8EE.

When we collect your personal data

We may collect information about you in the following ways:

• • • • When you fill out forms on any of our websites, including information provided during registration to use our websites, order products, subscribe to any of our services, post materials, or request additional services.
      • When you participate in a contest or promotion sponsored by us, or if you report a problem with our product or site.
      • If you contact us, we may save the history of this correspondence and record telephone conversations.
      • When you complete questionnaires that we use for research purposes, although you are not obliged to answer them.
      • Details of the transactions you make through our website and the fulfillment of your orders.
      • Visits to our sites, including but not limited to traffic data, location data, and other communication data necessary for our own security, diagnostics, authentication, and billing.

What personal data we collect

If you are just browsing our website, we will collect the following information in our logs:

• • • • IP address (see 'Cookies and IP addresses')

If you register to use our services, we will collect the following information:

• • • • IP address (see 'Cookies and IP addresses')
      • Your name
      • Your company name
      • Field of activity
      • Address
      • E-mail address
      • Phone numbers
      • Order and payment details
• Although it is not actively collected, we may store any other personal information that you may disclose during negotiations, calls, or electronic correspondence.

IP addresses and Cookies

IP addresses

We collect information about IP addresses to ensure security (DDoS prevention, hacking prevention, and fraud), diagnostics, and statistical analysis of traffic used to improve the performance and usability of our services. For GDPR purposes, we collect this information under legitimate interest.

Cookies

A cookie is a small file stored on your computer that is used to store settings and other information used by websites you visit.

We use cookies for the following purposes:

• • • • User authentication when entering or leaving our services.
      • To analyze traffic to our site using Google Analytics (see Google Analytics).
      • To track site settings.
      • If you register with us or continue to use our site, you agree to the use of cookies.

You can block cookies by activating the setting in your browser that allows you to refuse the configuration of all or some cookies. However, if you use your browser settings to block all cookies, you may be denied access to all or parts of our website.

If you have not changed your browser settings to refuse cookies, our system will create cookies as soon as you visit our site.

Where we store and process your personal data

The data we collect from you are stored in the UK, but may be processed by employees working outside the EEA (European Economic Area) who work for us or one of our partners. Such employees may be involved, among other things, in fulfilling your order, processing your payment details, and providing support services.

By submitting your personal data, you agree to the processing of this data outside the EEA.

We take all the necessary steps to ensure that your data, no matter where it is processed, is handled securely and in accordance with this privacy policy and GDPR, which includes ISO27001 certification.

How we protect your personal data

We take care of all data and take appropriate measures in accordance with data protection rules to ensure their safety.

• • • • All data that we collect is transmitted via encrypted connections (https).
      • All data is stored behind modern firewalls managed by our security team.
      • All data is controlled by access to ISO27001 standards.
      • All personal data storage systems have access logs.
      • All passwords are encrypted.
      • All systems undergo regular penetration testing and are monitored for vulnerabilities and attacks.

Personal data we use

We use information about you in the following ways:

• • • • To confirm your identity.
      • To provide you with the products and services you have purchased from us.
      • To fulfill our obligations arising from any contracts entered into between you and us.
      • To ensure that the content from our site is presented in the most effective way for your device.
      • For targeted responses to requests.
      • To provide you with information, products, or services that you request from us, provided you have agreed to this.
      • To notify you of changes to our services.
      • To send you marketing emails when you have given explicit consent.
      • To display personalized ads from us.
      • To prevent fraud.
      • To detect, prevent and diagnose potential security breaches.

Legal framework for collection and processing

The Data Protection Act establishes the conditions under which personal data may be collected and used as the basis for collection and processing. These include:

Contractual obligations

When you purchase a product or service, we need to collect personal data to fulfill our legal contractual obligations, such as managing your account, issuing bills, and contacting you for technical support.

Legal compliance

The law requires us to collect and process data for specific purposes, such as maintaining financial records (billing) and complying with law enforcement requirements for data.

Legitimate interest

We collect data under legitimate interest in a manner that is reasonably expected as part of our daily business. For example, we collect and register IP addresses to protect against fraud and enhance security and analyze the use of our site.

Your consent

In some cases, we may collect and process your data with your consent, for example, in our newsletter and promotional emails. Consent to receive marketing communications can be withdrawn or modified at any time through the Mailing Subscriptions section of our website or via your personal account.

How long we keep personal data

Your data will be stored until it is no longer needed for the purpose for which it was collected. Upon expiry, the data will either be deleted or anonymized so that it can no longer be associated with an individual. Personal data associated with purchases or any other financial transaction is stored for at least 6 years, as required by UK law for storing financial data.

With whom we share personal data

Like many websites, we use a number of third-party services for functions such as hosting and database storage, email, email registration, and payment processing. Below is a list of companies with whom we exchange data daily. This list does not include services that we provide anonymously or services provided on a one-time basis, such as IT contractors. All vendors listed below have been carefully selected to ensure suitable protection per GDPR.

Odoo S.A.

We use Odoo S.A.  for hosting sites, storing databases, and email and collaboration. In some cases, your personal data may be stored on Odoo S.A. servers. Any data stored there is encrypted and controlled by us.

Privacy policy: https://www.odoo.com/privacy​

Webhosting UK COM

We use Webhosting UK COM for hosting sites, storing databases, and email and collaboration. In some cases, your personal data may be stored on Webhosting UK COM servers. Any data stored there is encrypted and controlled by us.

Privacy policy: https://www.webhosting.uk.com/legal/privacy-policy​

Microsoft

We use Microsoft Office for document storage, email, and collaboration. In some cases, your personal data may be stored on Office 365 servers. Any data stored there is encrypted and controlled by us.

Privacy policy: https://privacy.microsoft.com

Advertising and Remarketing

We use Google's remarketing services to display our ads on third-party websites (including Google) to previous visitors to our sites. This is done using a cookie that contains anonymous information about your visit. You can opt out of these ads by managing your Google account settings here: http://www.google.com/settings/ads. Google is also a member of the NAI (Network Advertising Initiative), and you can use their site to opt out here: http://www.networkadvertising.org/managing/opt_out.asp.

Google Analytics

Like many websites, we use Google Analytics to collect anonymous data about users on our sites, such as how often they visit, which pages they visit, when they visit, how long they stay, and the country they visit from. This data is collected using cookies and your IP address. The statistics obtained are used for:

• • • • Improving site usability
      • Tracking marketing campaign success
      • Pattern analysis
• You can prevent Google Analytics from collecting this information by installing the Google Browser add-on: https://tools.google.com/dlpage/gaoptout. To learn how Google uses data collected from our own and partner sites, follow this link: https://policies.google.com

Newsletter and marketing emails

All our marketing emails are authorized by you. We will never sell your data or pass it on to third parties for marketing purposes.If you decide not to receive marketing emails, you can manage your preferences or opt out at any time by:

• • • • Clicking the unsubscribe link located in the footer of any marketing email. You will be redirected to the Mailing Subscriptions section of our website, where you can manage individual subscriptions or unsubscribe from all marketing communications.
      • Logging in to your personal account and navigating to: My Account → Edit Information → My E-mail Subscriptions.
      • Contacting our customer service department by phone, e-mail, or live chat.

Disclosure of your personal information

We may disclose your personal information to any member of our group, which includes our subsidiaries, our partners in your country of registration, and their subsidiaries, as defined in section 1159 of the Companies Act 2006 of the United Kingdom.

We may disclose your personal information to third parties:

• • • • If C-MES Solutions Ltd or significantly all of its assets are acquired by a third party, in which case personal data held about its customers will be one of the transferred assets.
      • If we are required to disclose or transfer your personal data to comply with any legal obligations or to enforce or apply our terms of delivery of products and services and other agreements, or to protect the rights, property, or safety of our customers or others. This includes exchanging information with other companies and organizations to protect against fraud and reduce credit risk.

External links

Our site may contain links to the sites of our partners, and these may transfer you to partner sites. If you follow a link to any of these websites, note that these websites have their own privacy policies, and we are not responsible for these policies. Please check these rules before submitting any personal data to these sites.

Your rights under GDPR

Under the GDPR (General Data Protection Regulation), you have several rights relating to your personal data, effective from May 25, 2018. For more information, see https://ico.org.uk.  C-MES Solutions Ltd. is registered as a data controller with the Information Commissioner’s Office (ICO) under registration number ZB885306.

Right to restrict processing

You have the right to request that we limit the processing of your personal data if we do not have a legitimate interest:

• • • • Where the accuracy of personal data is contested, to limit processing until accuracy is sufficiently verified.
      • Where you object to the processing (see 'Right to Object'), and we are considering whether there are legal grounds to override the request.
      • When processing is unlawful, and you oppose deletion and request restriction instead.
      • If we no longer need personal data, but you need it to establish, exercise, or defend a lawsuit.
• You can exercise this right at any time by contacting our team (see 'Contact us').

Right of access (access to information)

The GDPR gives you the right to access information about you. You can exercise this right by contacting us (see 'Contact us'). We must confirm your identity before processing any access requests. After verification, the data must be provided within 28 days. Data is provided free of charge; however, an administrative fee may apply if the request is manifestly unfounded or excessive, especially if it is repeated.

Right to erasure (also known as the right to be forgotten)

As an individual, you have the right to request the deletion of any data we hold about you. This is not an absolute right; for example, it does not override our requirement to keep financial data, such as invoice information, per UK law. You can make a request if your personal data is no longer needed concerning the purpose for which it was originally collected/processed, for instance, if you have canceled all the products and services you ordered from us.

To obtain the right to erasure, please contact our customer service (see 'Contact us').

Right to rectification

The GDPR provides the right to correct any personal data that may be incorrect or incomplete. Clients can update their personal data through their personal account. If this is insufficient, please contact our customer support (see 'Contact us').

Right to object

You have the right to object to the processing of your personal data if there is no legal basis for this. To make an objection request, please contact our customer support (see 'Contact us').

Changes to our privacy policy

We regularly review our privacy policy. The latest version can always be found at the following address: https://www.ready-3d.com/privacy-policy.

This privacy policy has been updated and is valid from 01.01.2026.