Charle Privacy Notice

Applies to: clients, prospective clients, suppliers, event guests, job applicants and visitors to our websites Data controller: Charle London Limited Version: 3.0 Last updated: 2 October 2026

1. Who we are

Charle London Limited ("Charle", "we", "us") is a Shopify Plus agency trading as Charle and Charle Agency. We are registered in England & Wales (company number 11863407), and our registered office is G05 Vox Studios West, 1-45 Durham Street, London, England, SE11 5JH. We are registered with the UK Information Commissioner's Office (registration number ZA912997).

For the personal data described in this notice we are the data controller. Our privacy lead is Nicholas Dunn, and you can reach us about anything in this notice at hello@charle.co.uk.

This notice covers how Charle as a business handles personal data. How our client platform, CSignal, handles data is covered by the CSignal Platform Privacy Policies, and how we handle data on our clients' behalf is covered by our Data Processing Agreement. All of these sit together in our Privacy & Trust hub.

2. Whose data this covers

• Clients and their teams: the people we work with at the brands we serve.
• Prospective clients: people at businesses we think we can help, and people who enquire with us.
• Suppliers and partners: the people we work with at the businesses that support us.
• Event guests: people who register for, or attend, our events and webinars.
• Job applicants: people who apply to work with us.
• Website visitors: people who visit charle.co.uk, charleagency.com or csignal.io.

3. What we collect

• Identity and contact details: name, job title, company, work email, phone number and business address.
• Business information: information about your company, including details from public company registers.
• Communications: emails, messages, call recordings or transcripts (see section 5), meeting notes and anything you send us.
• Commercial and financial details: quotes, contracts, invoices, payment records and, if you pay by direct debit, the mandate details held by our payment provider.
• Email engagement: whether our emails were delivered, opened or clicked, and the approximate location (city and country) and IP address they were opened from.
• Website activity: how you use our websites, collected with your consent (see section 7).
• Event details: registrations, attendance, and any dietary or access needs you choose to tell us (used only to look after you at the event).
• Job applications: your CV, cover letter, interview notes and references.

We do not intentionally collect special category data (such as health, ethnicity or religious beliefs), except where you choose to tell us about access or dietary needs for an event, which we use only for that purpose.

4. Where it comes from

Mostly from you: when you enquire, work with us, email or call us, register for an event, or apply for a role. We also use:

• Public sources, such as company registers, company websites and professional networks like LinkedIn.
• Business contact data providers, which supply work contact details for people at businesses we may be able to help.
• Your colleagues, when they introduce you or add you to a project.
• Our websites, through cookies and similar technologies, where you have agreed (see section 7).

5. How we use it

A few things we want to be upfront about:

• Our phone line. Calls to our main phone line may be answered by an AI voice assistant. It records a transcript and summary of the call so our team can follow up, and we tell you at the start of the call.
• Email records. Emails between you and our team may be logged against your company's record in our systems, so anyone looking after your account has the full picture.
• Email tracking. Our emails may include tracking that tells us whether, when and roughly where an email was opened. This helps us follow up at the right time.
• Enquiries and website activity. If you have agreed to analytics cookies on our website and later send us an enquiry, the pages you previously viewed on our website may be linked to your enquiry, so we understand what you are interested in.
• AI tools. We use AI tools to help draft documents, summarise calls and research businesses. A person at Charle reviews anything that matters before it is acted on, and we do not make decisions with legal or similarly significant effects about you by automated means alone.

6. Marketing and outreach

We may contact people at businesses we think we can help, by email, phone or LinkedIn, on the basis of our legitimate interests in growing our business. Every marketing email includes a way to unsubscribe, and you can ask us to stop at any time by emailing hello@charle.co.uk. When you opt out, we keep a minimal record of your details so we can make sure we do not contact you again.

7. Cookies and similar technologies

charle.co.uk and charleagency.com ask for your consent before setting any non-essential cookies. Your choice is stored in a cookie called charle_consent for one year.

csignal.io currently uses no analytics or marketing cookies. If that changes, we will ask for consent first. The CSignal application itself uses only cookies that are needed to sign you in and keep it secure.

You can change your choice at any time by clearing the consent cookie, or by changing your browser settings.

8. Who we share it with

We do not sell your personal data. We share it only with:

• Service providers who help us run our business, such as cloud hosting, email and productivity software, our CRM and client platform, email marketing, AI tools, phone systems, accounting and payments. They act on our instructions and are bound by contract to protect your data.
• Advertising and analytics partners listed in section 7, only where you have agreed to their cookies.
• Professional advisers, such as accountants, lawyers and insurers.
• Authorities, where the law requires it.
• A buyer or investor, if Charle is ever sold or restructured, under strict confidentiality.

A list of our main service providers is available on request.

9. International transfers

Some of our service providers are based outside the UK, mainly in the US and the EU. Where your data is transferred outside the UK, we make sure an appropriate safeguard is in place, such as the UK International Data Transfer Agreement or Addendum, the UK Extension to the EU-US Data Privacy Framework, or another approved mechanism.

10. How long we keep it

11. Your rights

You have the right to access your personal data, have it corrected, have it erased, restrict or object to how we use it (including an absolute right to object to direct marketing), and, where relevant, to data portability and to withdraw your consent.

To use any of these rights, email hello@charle.co.uk. We will respond within one month, and there is normally no fee. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, but we would appreciate the chance to put it right first.

12. Keeping it safe

We protect personal data with encryption, access controls, and by working only with established providers. Our Security overview in the Privacy & Trust hub explains our approach.

13. Changes

We update this notice when the way we work changes. The latest version is always available in our Privacy & Trust hub and on our website.