Privacy Policy | Cosmic Skip to main content

Privacy Policy

Cosmic takes the privacy of your information very seriously and this policy explains how we collect, use, and dispose of your information, the conditions under which we disclose it and how we keep it secure.

Who are we?

Cosmic is a Social Enterprise. Our company registration number is

 03308716. Our registered address is East Devon Business Centre, Heathpark Way, Honiton, EX14 1SF. We work with project partners to deliver our full services dedicated to digital transformation and  inclusion.

How do we collect information about you?

We have the following ways to collect your information about you on our website:

  1. Contact us form
  2. E-newsletter submission form
  3. New customer form
  4. New project beneficiary form

By filling out our contact form, or e-newsletter sign up, we will collect the following data

  1. Your name
  2. Your contact information; email addresses and/or telephone number

We collect additional information from you if you become a project beneficiary. This additional information includes (where required from Project Commissioners)

  1. Address
  2. List of attended activities
  3. Action plans
  4. Equal opportunities information
  5. Health information

This information is stored on the Project Commissioners database, which we accessed securely through a browser.

We also collect information about you when you email, telephone of write to us.

We collect additional information from you when you become a Customer. This additional information includes

  1. Address
  2. Contract relevant information (such as additional site information and staff information)

This information is stored on our CRM system which is accessed securely through a browser.

Personal Information we collect automatically

When you visit our website or use our services, we may collect certain information automatically such as:

  1. Your IP address (the name your computer used to identify itself to you)
  2. How you found our website
  3. The number of times you visited our website
  4. The pages that you visit

How your information is used

We may use your data for the following reasons:

  1. To respond to your request
  2. To provide contracted services
  3. Internal record keeping
  4. Improvement of our products/services

In addition, with your consent, we will also:

  1. send by email news, events and promotional materials that may be of interest of you

We review our retention periods on a regular basis, but we are legally required to hold some information to fulfil statutory obligations. We will hold your information for as long as is necessary for the relevant activity or as long as is set out in any relevant contract you hold with us.

Our legal basis for using your information

The law only allows us to use your personal information in certain limited circumstances. We have listed these below and what information they allow us to process.

1.) Where you have consented to us using your personal information

When you submit information to us on our website, we will process that information in order to comply with your request for further information.

2.) Where we need to perform the contract we have entered into with you

Examples of how we may use your information in order to comply with a contract that we have entered into with you:

  1. to provide the goods you have requested
  2.  to provide the services you have requested

3.) Where it is necessary for our legitimate interests

We may provide you with marketing information about our own products and services similar to those that you have purchased or enquired about (unless you tell us to stop).

4.) Where we need to comply with a legal obligation

An example of how we may use your information to fulfil a legal obligation is keeping records for tax purposes.

Third party service providers

We will not sell or share your information to third parties for marketing purposes.

We may pass your information to our third party service providers, subcontractors and other associated parties for the purposes of completing tasks on our behalf. When we use third party providers, we disclose only the information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes.

We employ the services of other trusted parties for dealing with certain processes necessary for our operations for collating e-newsletter responses and for online payments. We use secure Cloud based CRMs and accounts system for managing our Customer details and service records. 

Third party service providers that work in partnership with us

We work closely with a few service providers to deliver project based activities - such as the Positive People programme (Pluss), the Growth Support Programme (Devon County Council) and Enhance Social Enterprise programme (Devon County Council). When you enquire about these services, the relevant third party partner will use your information to carry out their contractual obligations. In some cases they will be acting as the Data Controller of your information and therefore we advise you to read their Privacy Policy. These providers will share your information with us which we will use in accordance with this Privacy Policy.

We will disclose your information if we are obliged or permitted by law to do so.

Your rights

At any time you have the right to request and view your personal data held by Cosmic. Your rights also include

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object

Please contact us on if you would like to exercise any of the above rights. We will provide a response within 3 working days.

You also have the choice to unsubscribe to any direct marketing that we send you. This feature is included in all e-marketing campaigns.

Security precautions

Data security is of great importance to Cosmic and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure data collected via this website.

If password access is required for certain parts of the website, you are responsible for keeping this password confidential.

We endeavour to protect your personal data. However, transmission of information over the internet is not entirely secure and is done at your own risk. We cannot ensure the security of your data transmitted to the website.

We will inform you if a breach occurs and that we consider your data exposure to be a risk to you and your rights.

Retention of information

We only hold your personal information for as long as necessary for the purposes for which we collected your information.

We have a retention policy which lays down timescales for the retention of information. Customer data retention periods can be found below:

Marketing Dataset

Description: Name and contact details of people expressing interest in our goods or services.
Retention Period: Up to 12 months from last contact

Customer Dataset

Description: Name and contact details of all customers including emails, addresses and payment information
Retention Period: Seven years after last order.


If you chose to send us information via email, we cannot guarantee the security of such information until it is delivered to us.


We may place and access certain Cookies on your computer. Cosmic uses Cookies to improve your experience of using the Website. Cosmic has carefully chosen these Cookies and has taken steps to ensure that your privacy is protected and respected at all times.

All Cookies used by this Website are used in accordance with current UK and EU Cookie Law.

Before the Website places Cookies on your computer, you will be presented with a pop-up requesting your consent to set those Cookies. By giving your consent to the placing of Cookies, you are enabling Cosmic to provide a better experience and service to you. You may, if you wish, deny consent to the placing of Cookies; however certain features of the Website may not function fully or as intended.

Our Website may place the following Cookies:

Analytical/performance cookies

Purpose: Allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.

You can choose to enable or disable Cookies in your internet browser and delete Cookies at any time.

It is recommended that you ensure that your internet browser is up-to-date and that you consult the help provided by your internet browser if you are unsure about adjusting privacy settings.

Links to other websites

We may provide links to other websites from our own website. We have no control over such websites and are not responsible for the content of these websites. This Privacy Policy does not extend to your use of such websites. You are advised to read the privacy policy or statement of other websites prior to using them.


You may not transfer any of your rights under this Privacy Policy to any other person. We may transfer our rights under this Privacy Policy where we reasonably believe your rights will not be affected. We may transfer your personal information to a third party as part of a sale of some or all of our business and assets. We would take steps to ensure your privacy rights continue to be protected.

Changes to this Privacy Policy

Cosmic reserves the right to change this Privacy Policy as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the website and you are deemed to have accepted the terms of the Privacy Policy on your first use of the website following the alterations.

You may contact Cosmic by email at

Definitions and Interpretation

In this Privacy Policy, the following definitions are used:

  1. Data: collectively all personal information that you submit to Cosmic via the Website. This definition incorporates, where applicable, the definitions provided in the Data Protection Act 1998 and GDPR (2018).
  2. Cookies: a small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website. Details of the cookies used by this Website are set out in the clause below (Cookies);
  3. Cosmic, we or us: Cosmic, a company incorporated in England and Wales with registered number 03308716 whose registered office is at East Devon Business Centre, Heathpark Way, Devon EX14 1SF;
  4. UK and EU Cookie Law: the Privacy and Electronic Communications (EC Directive) Regulations 2003 as amended by the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011;
  5. User or you: any third party that accesses the Website and is not either (i) employed by Cosmic and acting in the course of their employment or (ii) engaged as a consultant or otherwise providing services to Cosmic and accessing the Website in connection with the provision of such services; and

Website: the Website that you are currently using,, and any sub-domains of this site unless expressly excluded by their own terms and conditions.