This Privacy Statement sets out the principles and practices adopted by Citadel in relation to the collection, use, disclosure, and protection of personal information.
It applies to personal information relating to Citadel’s customers, including clients for products, outsourcing and other services, business partners, employees and former employees, trainees, applicants, contractors, prospects, vendors, and current or former members of the Board of Directors, whose personal information is processed by Citadel (collectively referred to as “Data Subjects”).
This Statement explains how personal information is collected, used, safeguarded, and shared by Citadel. It applies to all personal information provided directly to Citadel, as well as, where permitted by applicable law, personal information obtained from other lawful sources.
This Privacy Statement governs Citadel’s information practices, including the manner in which personal information is collected, used, disclosed, and protected through Citadel’s website (https://citadel365.com/) that links to this Statement (together referred to as “Citadel”).
Citadel may contain links to third-party websites provided for convenience or informational purposes. Accessing such links will direct you away from Citadel. Citadel does not control, endorse, or make representations regarding the privacy practices or content of such third-party websites. Any personal information you provide to, or which is collected by, third parties, including social media platforms, is governed by their respective privacy policies and is not covered by this Privacy Statement. Users are encouraged to review the privacy notices of third-party websites before providing personal information.
Citadel may also include social media features that allow users to share content or interact with Citadel through social media platforms. Use of these features may result in the collection or sharing of information, depending on the applicable platform settings. Users should review the privacy policies and settings of such platforms to understand how their information may be used.
3.01 Information Provided Directly by You
Citadel may collect personal information such as first name, last name, email address, job title, organisation name, country, city, phone number, and industry type when you complete forms on our Websites, submit enquiries, communicate with us by email, telephone, or written correspondence, or otherwise engage with our services.
3.02 Information Collected Automatically
Cookies may store a unique identifier associated with your device and are typically deleted when cookies are cleared. This information is used to enhance website functionality, assess performance, and improve marketing effectiveness. Further details are provided in the Cookies section below.
3.03 Information Collected from Third-Party Sources
3.04 Information Collected Through Mobile Devices
When accessing the Citadel Website via mobile devices, Citadel may collect personal information such as contact details, IP address, advertising identifiers, and device-related information.
Personal information may be used for the following purposes:
Processing is carried out in accordance with applicable laws. Where required, consent will be obtained. In other cases, processing is based on legitimate business interests, taking into account data minimisation, opt-out options, and limited retention.
All third-party service providers are required to implement appropriate security measures and process personal information solely for authorised purposes.
You may update or manage your personal information and communication preferences as follows:
Citadel uses cookies to enable website functionality, analyse traffic, personalise content, and support marketing activities. Cookies may include:
You may manage cookie preferences through browser settings or the cookie banner displayed on your first visit. Disabling cookies may affect website functionality.
Citadel may also use web beacons or tracking pixels to assess engagement with emails and website content.
Citadel maintains reasonable physical, technical, and organisational safeguards to protect personal information against unauthorised access, loss, misuse, or disclosure.
Service providers are contractually required to adhere to equivalent data protection standards.
Subject to applicable laws, you may have the right to:
Personal information may be transferred across borders to Citadel entities or service providers, subject to appropriate safeguards, including standard contractual clauses where required.
Any concerns or complaints relating to personal information processing may be addressed in writing to:
Citadel will endeavour to resolve grievances promptly.
This Privacy Statement is effective from 1 January 2026 and supersedes all previous versions. Updates will be published on this page. Rights under this Statement will not be reduced without explicit consent.
Last updated: 1 January 2026
