A corporate mentoring session in progress

Privacy and legal

Data protection and your rights

Best CSR Ltd handles personal data submitted through this website under the UK GDPR and the Data Protection Act 2018.

Lawful basis

For enquiries and tool results we rely on your consent, given by ticking the consent box before you submit. No box is ticked for you, the submission is refused without it, and you can withdraw consent at any time. Sponsor portal data is processed to perform our agreement with you or to take steps at your request. Aggregated page statistics rely on our legitimate interest in improving the site.

Retention

Every enquiry and tool record is stamped with a deletion date 24 months from creation, and a nightly scheduled job removes records once that date passes. You can ask for earlier deletion and we will act on it.

Your rights

  • Access a copy of the personal data we hold about you.
  • Have inaccurate data corrected.
  • Have your data erased.
  • Restrict or object to how we use it.
  • Receive your data in a portable format.
  • Withdraw consent without affecting earlier lawful processing.

These rights are free to exercise. We may ask you to confirm your identity before we release data.

Making a request

Email data@bestcsr.co.uk with “data request” in the subject line, telling us which right you want to use. We respond within one calendar month, and will tell you if a complex request needs longer.

Complaints

If you are unhappy with how we have handled your data, tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk.

Related pages

See the privacy notice for what we collect and who processes it, and the cookie policy for what is stored in your browser.

Last reviewed: 10/09/2026.