top of page

Privacy Policy

Introduction

This Privacy Policy explains how Breon Solutions Limited ('Breon', 'we', 'our' or 'us') collects, uses, stores and protects personal data when you use our website, contact us or use our software products, including CDD Workspace. Breon is committed to protecting personal data in accordance with the UK GDPR and the Data Protection Act 2018.

Who we are

Breon Solutions Limited

Company Number: 16673559
Registered Address: 6 Ricards Road, London, SW19 7ES
ICO Registration: ZC178775
Email: support@breonsolutions.com

Controller and Processor

For website enquiries, marketing communications, customer accounts and our own business operations, Breon acts as the Data Controller.

For information uploaded by customers into CDD Workspace (including CDD packs, client details, documents and notes), Breon acts as a Data Processor on behalf of the customer, who remains the Data Controller

Information we collect

  • Contact details including name, email address and organisation.

  • Account information including email address, profile information and authentication identifiers.

  • Firm information and user preferences.

  • Information entered into CDD Workspace including company details, individual information, notes, comments and uploaded evidence.

  • Technical information required to operate the service, including audit logs and authentication metadata.

  • Companies House data retrieved following customer searches.

How we use information

  • Provide and maintain our services.

  • Authenticate users and manage accounts.

  • Generate CDD reports and maintain audit trails.

  • Respond to enquiries and provide customer support.

  • Improve platform reliability and security.

  • Comply with legal and regulatory obligations.

Legal bases

We rely on one or more of the following lawful bases: performance of a contract, legitimate interests, legal obligations and consent where required.

Security

Breon implements technical and organisational measures designed to protect personal data. These include authenticated access, firm-level data segregation, row-level security, private document storage, HTTPS, security headers, audit fields, upload validation and role-based access controls. Access is restricted to authorised users.

Storage of documents

Customer documents uploaded into CDD Workspace are stored within private cloud storage. Access is limited to authorised users belonging to the relevant customer organisation. Time-limited signed URLs are used when documents are accessed.

Third-party providers

Breon currently uses trusted service providers including Supabase (authentication, database and storage), Vercel (hosting), Companies House (company information) and Google Fonts. We only share information where necessary to deliver the service.

Cookies and local storage

Our website does not currently use analytics or advertising cookies. Essential technologies required for authentication, security and operation of the platform may be used. Browser local storage may also be used to improve user experience within authenticated areas.

International transfers

If personal data is transferred outside the UK, Breon will ensure appropriate safeguards are in place in accordance with UK data protection law.

Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, to comply with legal obligations, resolve disputes and enforce agreements. Customer data remains under the customer's control and may be deleted in accordance with contractual arrangements.

Your rights

  • Access your personal data.

  • Request correction of inaccurate information.

  • Request erasure where applicable.

  • Restrict or object to processing.

  • Data portability where applicable.

  • Withdraw consent where processing relies on consent.

  • Complain to the Information Commissioner's Office.

AI and automated decision making

CDD Workspace does not currently use artificial intelligence to process customer data and does not make automated decisions that produce legal or similarly significant effects on individuals.

Changes

We may update this Privacy Policy from time to time. The latest version will always be available on our website together with its effective date.

Contact

Questions about this Privacy Policy or our handling of personal data can be sent to:

support@breonsolutions.com

Breon Solutions Limited
6 Ricards Road
London
SW19 7ES

bottom of page