Privacy Policy & GDPR Statement

C2S Consultancy Services Limited

1. Policy Information
C2S Consultancy Services Limited (“C2S”, “we”, “us”) provides expert welfare benefits support for PIP and Attendance Allowance. We are committed to protecting your privacy and handling your personal information securely, lawfully and transparently in accordance with UK GDPR and the Data Protection Act 2018. We may update this policy from time to time to reflect legal or operational changes. Any updates will be posted on this page with a revised “last updated” date.

2. Who We Are
Company Name: C2S Consultancy Services Limited
Company Registration Number (CRN): 17356716
Registered Office: 71-75 Shelton Street Covent Garden WC2H 9JQ
Email: info@c2sconsultants.co.uk
ICO Registration Number: ZC206175.

3. Definitions
“Personal data” means any information that can identify you directly or indirectly.
“Special category data” means more sensitive information such as health data.
“Data controller” means the organisation that decides how and why your data is processed (C2S Consultancy Services Limited).
“Processor” means an organisation that processes data on our behalf (for example, Wix.com).

4. Information We Collect
We only collect information necessary to deliver our services. This may include:
• Personal Information: Name, address, date of birth, contact details, NI number, household details, representative information.
• Financial Information: Income, pensions, savings, benefits received, housing costs.
• Health & Special Category Data: Medical conditions, disabilities, care needs, medication, functional limitations, evidence.
• Technical Information: IP address, browser type, device information, pages visited and time spent on the site (via cookies and similar technologies).

5. How We Collect Your Information
We collect information:
• Directly from you via screening forms, consultations, phone calls, emails and documents you provide.
• From representatives or family members acting on your behalf.
• From health professionals, the DWP or local authorities where you have given consent or where we are otherwise legally permitted to do so.

6. Purposes and Lawful Bases for Processing
We process your personal data for the following purposes and lawful bases:

Mapping of Purposes to Lawful Bases
Purpose of Processing – Lawful Basis
• Assessing eligibility for DWP-related services – Legitimate interests / Performance of a contract
• Communicating with you about your application – Performance of a contract
• Providing consultancy services – Performance of a contract
• Improving our website and services – Legitimate interests
• Legal and regulatory compliance – Legal obligation

Where we process special category data (such as health information), we do so on the basis of your explicit consent and/or because it is necessary for the establishment, exercise or defence of legal claims.

7. Sharing Your Information
We may share your information with:
• The Department for Work and Pensions (DWP), HM Courts & Tribunals Service and other relevant public bodies where necessary to progress your claim.
• Health professionals or other third parties where you have given consent or where we are legally permitted to do so.
• Trusted service providers who support our business operations (for example, secure cloud storage and IT support).

We do not sell your personal data to third parties.

Processor Disclosure (Wix.com)
Wix.com acts as a data processor for website hosting, analytics, and form submissions. Wix processes data strictly under our instructions and in accordance with GDPR and UK data protection law.

8. Security & Storage
We take appropriate technical and organisational measures to protect your personal data, including secure cloud storage, access controls, encryption where appropriate, and staff training. Access to your data is limited to those who need it for legitimate business purposes.

9. International Data Transfers
C2S Consultancy Services Limited uses Wix.com as our website hosting provider. This means your personal data may be transferred to and stored on secure servers located outside the United Kingdom and the European Economic Area (EEA), including in the United States.
Wix.com ensures appropriate safeguards are in place for international transfers, including the use of Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner’s Office (ICO).
By using our website and submitting your information, you acknowledge that your data may be processed outside the UK/EEA under these safeguards.

10. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements.
Typical retention periods are:
• Application and assessment data: retained for up to 6 years in line with DWP and statutory record‑keeping requirements.
• General enquiries: retained for up to 12 months.
• Website analytics and cookies: retained according to Wix’s standard retention schedule.
Where retention periods cannot be precisely defined, we apply the following criteria:
• The nature and sensitivity of the data
• Legal obligations
• Whether the data is still required to provide services
• The likelihood of future queries or disputes
Once data is no longer required, it is securely deleted or anonymised.

11. Cookies and Tracking Technologies
Our website is hosted on Wix.com, which uses cookies and similar technologies to ensure the site functions correctly, improve performance, and analyse visitor behaviour.
Cookies may collect:
• IP address
• Device and browser information
• Pages visited
• Time spent on the site
You can manage or disable cookies through your browser settings. For full details, please refer to Wix’s Cookie Policy.
If you would like us to add a Cookie Banner or Cookie Settings Page, just tell us.

12. Automated Decision-Making
C2S Consultancy Services Limited does not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.
If this changes, we will update this policy and notify users where required.

13. Children’s Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data relating to children.
If we become aware that we have inadvertently collected such data, we will delete it promptly, unless we are legally required to retain it.

14. Your Rights
Under UK data protection law, you have the right to:
• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent where we rely on consent.

15. How to Withdraw Consent
Where we rely on your consent (for example, for certain communications or for processing special category data), you can withdraw this at any time by emailing info@c2sconsultants.co.uk. This will not affect the lawfulness of any processing carried out before you withdrew your consent.

16. Changes to This Policy
We may update this Privacy & GDPR policy from time to time. Any changes will be posted on this page with an updated “last updated” date. We encourage you to review this page periodically to stay informed about how we protect your information.

17. Contact and Complaints
If you have any questions about this policy or how we handle your data, please contact:
Email: info@c2sconsultants.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: www.ico.org.uk
Telephone: 0303 123 1113.