Privacy notice

How we handle information about you. Last updated 24 September 2026.

Who we are

CPLTI is a trading name of Nexum International Limited, a company registered in England and Wales with company number 17183459, whose registered office is at 104 Homestead Crescent, Manchester, England, M19 1GL.

Nexum International Limited is the data controller for the information described in this notice. You can contact us about it at jack@cplti.co.uk.

This website

This website is hosted by Squarespace. Squarespace sets the cookies it needs to run the site, and may collect basic visitor statistics; you can manage non-essential cookies using the cookie banner.

If you use the contact form we collect your name, email address, telephone number and your message, so that we can reply. That is all the form asks for.

What you send us

If you email us, call us or meet us, we hold what you send and what you tell us: your name, your contact details, and what you tell us about your business. We use it to reply and, if the conversation goes further, to assess whether an acquisition makes sense.

Information we hold that you did not give us

We research UK services businesses so that we can identify businesses we may wish to buy. That research holds information about people (company owners, directors and named contacts) who have not contacted us.

What we hold. Name, business role, and the company or companies you are connected to. Business contact details where those are published: office address, telephone, business email and website. Where you are recorded as a person with significant control of a company, we also hold what that register publishes about you: your month and year of birth (not the day), nationality, country of residence, and the nature of your control.

Where it comes from. Companies House, including the register of people with significant control and the accounts companies file; the public registers kept by industry certification and trade bodies; and company websites. We also use commercial business-contact databases to find or confirm a business contact detail we cannot get from a public source.

We do not use consumer data brokers, we do not seek information about you outside your working life, we do not take anything from behind a login, and we do not look for personal addresses, personal phone numbers or personal email accounts.

Why we hold it. Our lawful basis is legitimate interests: understanding who operates in the sectors we invest in, and approaching business owners about a possible sale. We have assessed that this does not override your rights, because what we hold is business information about you in a professional capacity, and we use it only to consider and make an approach to the company you are connected to.

Your right to object. You can ask us to stop holding information about you, or to stop contacting you, and we will. Email jack@cplti.co.uk and we will remove you and keep a record that you objected, so that a later refresh does not add you back.

How long. We refresh this research from time to time. If you no longer appear in the public source, we remove you at the next refresh.

*We check that business email addresses are valid using MillionVerifier, which confirms whether a mailbox exists without sending it a message.

Calls, meetings and the notes we keep

What we record. We record telephone calls to and from our business numbers, and our video meetings, and we make a written transcript of each. Our phone line plays a message telling you that the call is recorded before it connects. In video meetings a note-taking assistant joins as a visible participant, and the meeting shows that it is being recorded.

Who said what. Transcripts record which speaker said each part. Speakers are identified from what is said, such as someone introducing themselves, together with the phone number or meeting invitation. We do not create or keep voice profiles or voiceprints of anyone.

The notes we keep. From each conversation we keep structured notes of what was said about a business, its sector and the next steps, each linked to who said it and when, so that we remember what we have been told and do not ask you the same thing twice. If a conversation touches on something sensitive and personal, such as someone's health, we do not keep it in our notes.

Automated tools, human decisions. Transcription, summarising and note-taking are carried out by automated tools, including AI models. People read and decide; no decision about you or your business is made solely by automated means.

Why. Our lawful basis is legitimate interests: keeping an accurate record of business conversations and evaluating possible acquisitions. You can object at any time, and you can ask us not to record a call before it starts; we will take notes by hand instead.

How long. Call and meeting recordings are deleted after 24 months, because the transcript becomes the record. Transcripts and notes are deleted 24 months after our last contact with you, unless a transaction is in progress or you have asked us to keep in touch.

Who sees it

Only us. We do not sell, rent or share your information for marketing. If a transaction goes ahead we may need to share information with our accountants, solicitors or lenders; we will tell you before we do, and they are bound by confidentiality. If we discuss a transaction seriously, we will sign a non-disclosure agreement with you before you send anything confidential.

The services that hold it for us. We use a small number of providers, who act only on our instructions:

Google, for our email, calendar and files, and the cloud systems that run our records (hosted in London)
Supabase, our database (hosted in London)
Squarespace, which hosts this website and its contact form
Aircall, our phone system, which records calls
AssemblyAI, which transcribes call recordings (processed in the EU)
Fathom, the note-taking assistant in video meetings
Anthropic, whose AI models read, summarise and take notes
Telegram, for messages between our team
Outline, for our internal notes

Some of these providers process data outside the UK, including in the United States. Where they do, we rely on the transfer safeguards that UK data protection law requires.

How long we keep it

If a conversation goes nowhere, we delete what you sent us within 24 months of our last contact, unless you have asked us to keep in touch. Recordings, transcripts and notes follow the periods in section 05. If a transaction completes, we keep records for as long as the law requires.

Your rights

You can ask us what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Email jack@cplti.co.uk and we will respond within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.