Privacy
Last updated 31 October 2026.
Who we are
The CNS customer portal is run by SRH MANAGEMENT CONSULTANTS LIMITED, trading as Customer Needs Solution (CNS). We are the controller of the personal data described here.
Registered in England and Wales, company number 04923338. Registered office: 32 Byron Hill Road, Harrow on the Hill, Harrow, Middlesex HA1 0HY.
What we hold
- Your name and email address, which you give us when you sign up or accept an invite.
- Your organisation name, your role in it, and the people you invite to it.
- Sign-in records: when you signed in and out, and a record of team changes (invites and role changes).
- Your plan and its status (for example active or cancelled), and the Stripe customer and subscription references for your organisation.
We do not store card numbers. Payments are taken by Stripe.
Why we hold it
- To create your account, email you sign-in and invite links, and keep you signed in.
- To give you and your team access to the portal and the plan you pay for.
- To take payment for your subscription and keep billing records.
- To keep the portal secure, including limiting repeated requests and blocking automated sign-ups.
We rely on two lawful bases. Contract: to create and run your account, give you access, and take payment for the plan you choose. Legitimate interests: to keep the portal secure and prevent abuse, and to keep records of team changes so organisations can see who did what.
Who we share it with
- Stripe processes subscription payments. Stripe receives your organisation name and email address and handles your card details under its own privacy policy.
- Cloudflare hosts the portal, stores the portal database, sends our emails, and runs the Turnstile check on the sign-up and sign-in forms.
Stripe and Cloudflare may process data outside the UK. Where they do, they protect it under their standard safeguards, such as the UK International Data Transfer Addendum and standard contractual clauses.
Cookies
The portal sets two cookies that it needs to work: one keeps you signed in, and one protects forms against cross-site requests. We do not use advertising or analytics cookies in the portal.
How long we keep it
Sign-in links expire after 15 minutes and invite links after 7 days. Sessions end after 30 minutes of inactivity and after 7 days at most.
We keep your account data while your account is active. Billing records are kept for 6 years after the end of the financial year they relate to, because the law requires us to keep accounting records. When an account closes we delete or anonymise the rest of its data, unless we need it to deal with a dispute.
Your rights
Under UK data protection law you can ask us for a copy of your data, ask us to correct it, delete it or restrict how we use it, object to processing based on legitimate interests, and ask for data you gave us in a portable format. Email us at the address below and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.