Privacy Policy

1. Introduction

This Privacy Policy explains how Webumo Ltd, trading as Contismo ("Contismo", "we", "us" or "our"), collects, uses, stores and protects personal information when you visit our website, create an account, use our platform or otherwise interact with our services.

We are committed to protecting your privacy and handling personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

By using Contismo, you acknowledge that your personal data may be processed as described in this Privacy Policy.

2. Who We Are

Contismo is operated by:

Webumo Ltd
Company Number: 15995768
Registered Office:
Suite A, 82 James Carter Road
Mildenhall
United Kingdom
IP28 7DE
Email: [email protected]

For the purposes of UK data protection law, Webumo Ltd acts as a data controller in relation to personal information collected through our website, account registration process, billing systems, support channels and business operations.

3. Our Role When Processing Data

Account and Business Information

When you create an account, contact us, subscribe to a plan or use our website, Webumo Ltd acts as the data controller of the personal data collected.

Customer Content

Contismo is a content management platform and customers may choose to store content that contains personal data.

Where personal data is included within customer content, Webumo Ltd generally acts as a data processor, processing such data on behalf of the customer who remains the data controller responsible for determining the purposes and means of processing.

Customers are responsible for ensuring they have an appropriate legal basis for processing any personal data stored within the platform.

4. Information We Collect

Information You Provide

We may collect:

• Name
• Email address
• Company name
• Account credentials
• Billing information
• Support requests
• Communications sent to us
• Information provided through forms or surveys

Information Collected Automatically

We may collect:

• IP address
• Browser type and version
• Device information
• Operating system
• Usage and activity information
• Log data
• Referring URLs
• Session information
• Performance and diagnostic information

Customer Content

We may process content uploaded, created or stored within the platform, including text, media files, structured content and metadata.

Such content may contain personal data depending on how customers choose to use the platform.

5. How We Use Personal Data

We use personal data to:

• Provide and operate the Contismo platform
• Create and manage user accounts
• Authenticate users
• Process payments and subscriptions
• Deliver customer support
• Monitor platform performance and security
• Detect fraud, abuse and unauthorised activity
• Improve our products and services
• Communicate service updates and operational notices
• Comply with legal and regulatory obligations
• Enforce our agreements and policies

We do not sell personal data.

6. Legal Bases for Processing

Depending on the circumstances, we process personal data on one or more of the following legal bases:

Performance of a Contract

Where processing is necessary to provide services requested by you.

Legitimate Interests

Where processing is necessary for our legitimate interests, including:

• Operating and improving our services
• Securing our platform
• Preventing fraud and abuse
• Managing customer relationships
• Analysing platform usage

Legal Obligations

Where we are required to process data to comply with legal obligations.

Consent

Where required by law, we will rely on consent, which may be withdrawn at any time.

7. Sensitive Personal Data

Contismo is not designed for the storage of special category personal data.

Unless expressly agreed by us in writing, customers must not use the platform to store or process:

• Health information
• Biometric data
• Genetic data
• Criminal conviction data
• Information revealing racial or ethnic origin
• Political opinions
• Religious or philosophical beliefs
• Trade union membership information
• Other special category data under applicable data protection laws

Customers remain responsible for ensuring compliance with applicable data protection laws in relation to content uploaded to the platform.

8. Sharing Personal Data

We may share personal data with trusted service providers who assist us in operating our business and platform.

These may include providers of:

• Cloud infrastructure
• Database hosting
• Payment processing
• Customer support tools
• Security services
• Monitoring and analytics services
• Professional advisers

Current categories of providers may include services supplied by:

• DigitalOcean
• Neon
• Stripe

We may also disclose personal data:

• Where required by law
• To comply with court orders or regulatory requirements
• To protect our rights, users or business
• In connection with a merger, acquisition or sale of assets

9. International Data Transfers

Our services may operate across multiple geographic regions.

As a result, personal data may be transferred to and processed in countries outside the United Kingdom.

Where such transfers occur, we take appropriate measures to ensure personal data receives an adequate level of protection, including the use of contractual safeguards and other lawful transfer mechanisms where required.

10. Security

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, loss, misuse or alteration.

These measures may include:

• Encryption in transit
• Access controls
• Authentication mechanisms
• Monitoring and logging
• Backup procedures

However, no internet-based service can be guaranteed completely secure and we cannot guarantee absolute security.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods vary depending on:

• The nature of the data
• Legal requirements
• Business needs
• Security considerations

Platform backups are generally retained for approximately 30 days, after which they may be deleted or overwritten.

Account information may be retained for longer periods where required for legal, accounting, tax or dispute-resolution purposes.

12. Marketing Communications

Where permitted by law, we may send information about our services, updates, new features and other business-related communications.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in emails
• Adjusting your account preferences where available
• Contacting us directly

Operational and service-related communications may still be sent where necessary.

13. Cookies and Similar Technologies

We use cookies and similar technologies to operate, secure and improve our website and services.

Cookies may be used to:

• Maintain user sessions
• Remember preferences
• Analyse usage
• Improve performance
• Enhance security

Further details are provided in our Cookie Policy.

14. Your Rights

Subject to applicable law, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of personal data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent where consent is relied upon

To exercise these rights, please contact us using the details below.

We may request information to verify your identity before responding to a request.

15. Complaints

If you have concerns about how we process personal data, we encourage you to contact us first.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

16. Changes to This Policy

We may update this Privacy Policy from time to time.

Where changes are material, we will take reasonable steps to notify users through the website, platform or email.

The latest version will always be published on our website with the updated effective date.

17. Contact Us

For questions regarding this Privacy Policy or our handling of personal data, please contact:

Webumo Ltd
Trading as Contismo
Suite A, 82 James Carter Road
Mildenhall
United Kingdom
IP28 7DE
Email: [email protected]