Cumbria Trade Directory is operated by Cascade Digital, Unit 3, Atlas Works, Nelson Street, Carlisle, Cumbria, CA2 5NB. For the purposes of UK data protection law, Cascade Digital is the data controller for the personal data described in this policy.
If there are any questions about this privacy policy or about how personal data is handled, contact: info@cascadeuk.ai.
Who this policy applies to
This privacy policy applies to:
- visitors to www.cumbriatradedirectory.co.uk;
- business owners or representatives who claim, amend or manage a listing;
- people who contact Cumbria Trade Directory; and
- individuals whose business contact details appear in directory listings where those details have been gathered from publicly available sources.
What information is collected
Cumbria Trade Directory may collect and use the following categories of information:
- business listing details, such as business name, address, telephone number, website address, service area, opening information, and other business contact details taken from publicly available sources;
- information submitted through forms, including name, email address, telephone number, business name, listing details, and message content;
- correspondence records when someone emails or otherwise contacts the business;
- technical and usage data, such as IP address, browser type, device information, pages viewed, and general website interaction data;
- essential cookie data required for the website to function properly; and
- basic analytics data used to understand site usage and improve performance.
Cumbria Trade Directory does not sell personal data to third parties.
Where the information comes from
Personal data may be collected:
- directly from the individual or business representative, for example when submitting a claim form, contact form, or amendment request;
- from publicly available sources, where business listing details are compiled for directory purposes; and
- automatically through website use, such as through server logs, essential cookies, or analytics tools.
Where personal data is obtained from a source other than the individual, privacy information should generally be provided within one month unless an exemption applies.
How the information is used
Cumbria Trade Directory may use personal data to:
- operate, maintain and improve the online directory;
- create, display and manage business listings;
- verify listing ownership and process free listing claims;
- respond to enquiries, messages, and support requests;
- correct, update or remove listings where appropriate;
- monitor website performance, security and functionality; and
- keep records needed for administration and dispute handling.
If a business submits a listing claim or otherwise makes contact, Cascade Digital or Cascade UK may also contact that business about relevant services connected with operating or improving its online presence, such as web, SEO, marketing, AI, or related business services. Direct marketing must have a valid lawful basis and may also be subject to PECR depending on the communication method and recipient type.
Lawful bases for processing
Cumbria Trade Directory may rely on the following lawful bases under UK GDPR, depending on the activity:
- Legitimate interests for running and improving the directory, publishing and maintaining business listings, handling business enquiries, preventing misuse, and contacting businesses about relevant services where permitted;
- Consent where consent is specifically requested and relied on, for example for certain marketing or optional cookies if introduced later; and
- Legal obligation where data must be retained or disclosed to comply with legal or regulatory requirements.
Where direct marketing is sent, the lawful basis should be assessed carefully. The ICO says the two lawful bases most likely to apply to direct marketing are consent and legitimate interests, but PECR may require consent for some electronic marketing messages depending on who is contacted and how.
Business listings and publicly available data
Cumbria Trade Directory is a business directory and may publish listing information compiled from publicly available sources. That information may include business contact details and other information already made public by the business elsewhere.
Reasonable steps should be taken to keep listings accurate, but listings may sometimes be incomplete, inaccurate or out of date. Business owners or authorised representatives may request that a listing be claimed, amended or removed by emailing info@cascadeuk.ai.
Sharing information
Personal data may be shared only where necessary with:
- website hosting providers;
- database, CRM, analytics, email, or technical support providers;
- professional advisers, such as legal, compliance, or accounting advisers where necessary; and
- regulators, law enforcement, courts, or other authorities where disclosure is legally required.
Personal data is not sold to third parties.
Where service providers process personal data on behalf of Cumbria Trade Directory, they should do so only on instructions and with appropriate safeguards in place.
Marketing communications
Cascade Digital, including through its main trading business Cascade UK, may contact listed businesses or people who submit a claim or enquiry about services that are considered relevant to their business. This may include digital marketing, website, AI, directory-related, or associated promotional services.
Anyone receiving marketing communications should be given a clear way to opt out or object. The ICO says organisations must have a valid reason for direct marketing and must also consider PECR rules for calls, emails, and text messages.
Cookies and analytics
Cumbria Trade Directory currently uses essential cookies needed for the site to function. If analytics tools are used, they should be configured in a privacy-conscious way where possible, and this policy should be updated if non-essential cookies or more detailed tracking technologies are introduced.
International transfers
Cumbria Trade Directory aims to store and process data in the UK or in countries with appropriate safeguards. If any service provider stores or accesses personal data outside the UK, appropriate transfer protections should be used where required under data protection law.
Data retention
Personal data should not be kept for longer than necessary, and retention may vary depending on the type of information and the reason it was collected.
A practical retention approach for this site would be:
- listing claim and contact form enquiries, for as long as necessary to deal with the enquiry and maintain an audit trail;
- listing records, while the listing remains active and for a reasonable period afterwards where needed for administration or dispute resolution;
- marketing suppression records, as needed to ensure opt-out requests are respected; and
- technical logs and analytics data, only for a limited period appropriate to security and reporting needs.
Data security
Appropriate technical and organisational measures should be used to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. While no internet-based service can be completely secure, reasonable steps should be taken to safeguard the information held.
Individual rights
Under UK data protection law, individuals may have the right to:
- request access to their personal data;
- request correction of inaccurate or incomplete data;
- request erasure in certain circumstances;
- request restriction of processing in certain circumstances;
- object to processing carried out on the basis of legitimate interests, including direct marketing;
- request transfer of data in certain circumstances; and
- withdraw consent where processing is based on consent.
To exercise any of these rights, email info@cascadeuk.ai. A response will usually be provided within one calendar month, although this can be extended where the law allows.
Complaints
If there is a concern about how personal data has been handled, contact Cumbria Trade Directory first at info@cascadeuk.ai so the issue can be investigated.
Individuals also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. Information about complaints is available at ico.org.uk.
Changes to this policy
This privacy policy may be updated from time to time to reflect legal, technical, or operational changes. The latest version will always be published on the website with the updated revision date.
Last updated: June 2026.