Privacy & Cookies
Your information, handled with care.
CM2 (Square Centimeter Ltd) collects only the minimum information necessary to provide our advisory service. We do not sell, share, or misuse your data.
Last updated: 21 April 2026 · Registered in England & Wales · Company No. 15240820
1. Who We Are
Square Centimeter Ltd, trading as CM2, is the data controller for personal data collected through this website. Our registered address is in England and Wales (Company No. 15240820). For all privacy enquiries, please contact us at [email protected] or via WhatsApp.
2. Information We May Collect
- Contact details you provide voluntarily — name, WhatsApp number, and optionally email — when submitting a request through CM2 GPT, our contact form, or the Book a Tour form.
- Preference data from the CM2 GPT qualification flow — your stated investment objective, market preference, unit type, and timeline.
- Tour booking details — preferred development, date, time slot, and any notes you provide.
- Basic usage information — pages visited and interactions with CM2 GPT — to improve the quality of our service. This data is only collected after you have given consent to analytics cookies.
3. How We Use Your Information
- To respond to your enquiry and provide a personalised property shortlist.
- To confirm and coordinate property tour bookings.
- To connect you with a CM2 advisor for live availability confirmation.
- To improve our advisory service and the quality of CM2 GPT recommendations.
- To comply with applicable legal and regulatory obligations.
4. Legal Basis for Processing
We process your personal data on the basis of your consent (Article 6(1)(a) UK GDPR) where you have voluntarily submitted an enquiry or tour request, and on the basis of legitimate interests (Article 6(1)(f) UK GDPR) where we use anonymised usage data to improve our service. Analytics and marketing cookies are only placed with your explicit consent, as required under UK PECR Regulation 6.
5. Cookies and Similar Technologies
We use cookies and similar tracking technologies on this website. A cookie is a small text file stored on your device. Under the UK Privacy and Electronic Communications Regulations 2003 (UK PECR), we are required to obtain your consent before placing any cookies that are not strictly necessary for the operation of the site.
We use cookies for the following purposes:
- Strictly necessary — to keep you logged in and to remember your cookie consent preference. These cannot be disabled as the site would not function correctly without them.
- Analytics (with consent) — Google Analytics 4 helps us understand which pages are visited, how long visitors stay, and where they come from. This data is aggregated and anonymised.
- Marketing (with consent) — Meta Pixel allows us to measure the effectiveness of any advertising campaigns we run on Facebook and Instagram, and to build retargeting audiences.
Full cookie inventory:
| Cookie Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| session | CM2 (thecm2.com) | Maintains your authenticated session after logging in via Manus OAuth. Required for the site to function correctly. | Session (deleted when browser is closed) | Strictly Necessary |
| cm2_cookie_consent | CM2 (thecm2.com) | Stores your cookie consent preference (accepted or rejected) so the banner is not shown on every visit. | Persistent — until manually cleared or consent version changes | Strictly Necessary |
| _ga | Google Analytics (Google LLC) | Registers a unique ID to generate statistical data on how you use the website. Used to distinguish users. | 2 years | Analytics |
| _ga_[ID] | Google Analytics (Google LLC) | Used by Google Analytics 4 to persist session state and count page views within a session. | 2 years | Analytics |
| _gid | Google Analytics (Google LLC) | Registers a unique ID to generate statistical data on how you use the website. Expires after 24 hours. | 24 hours | Analytics |
| _fbp | Meta Platforms, Inc. | Used by Meta (Facebook) to deliver, measure, and improve the relevance of advertisements. Identifies browsers for ad delivery and measurement. | 3 months | Marketing |
| _fbc | Meta Platforms, Inc. | Stores the last Facebook ad click. Used to attribute conversions to Meta advertising campaigns. | 2 years | Marketing |
Third-party data processors:
- Google LLC — Google Analytics 4. Data may be transferred to the United States under Standard Contractual Clauses. Privacy policy: policies.google.com/privacy
- Meta Platforms, Inc. — Meta Pixel. Data may be transferred to the United States under Standard Contractual Clauses. Privacy policy: www.facebook.com/privacy/policy
Managing your cookie preferences
You can withdraw or change your cookie consent at any time by clicking the button below. Strictly necessary cookies cannot be disabled as they are required for the site to function. Withdrawing consent will take effect on your next page load — analytics and marketing scripts will not be loaded until consent is re-granted.
You may also control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling strictly necessary cookies may affect the functionality of this website. For guidance on managing cookies in your browser, visit allaboutcookies.org.
6. Data Sharing
We do not sell, rent, or trade your personal data. We share data only with trusted third-party service providers (listed in Section 5) who process it on our behalf under appropriate data processing agreements, and where required by law or regulation.
7. International Data Transfers
Some of our third-party service providers (Google, Meta) are based outside the UK and the European Economic Area. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).
8. Retention
We retain your personal information only for as long as necessary to provide the service you requested and to comply with applicable legal obligations. Enquiry and tour booking data is retained for up to 24 months. Analytics data is retained in accordance with Google Analytics default retention settings (14 months). You may request deletion of your personal data at any time by contacting us.
9. Your Rights Under UK GDPR
As a data subject under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:
- Right of access — to request a copy of the personal data we hold about you.
- Right to rectification — to request correction of inaccurate or incomplete data.
- Right to erasure ('right to be forgotten') — to request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restrict processing — to request that we limit how we use your data.
- Right to data portability — to receive your data in a structured, machine-readable format.
- Right to object — to object to processing based on legitimate interests.
- Right to withdraw consent — to withdraw consent for analytics and marketing cookies at any time (see Section 5).
- Right to lodge a complaint — with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data rights have been infringed.
10. Changes to This Policy
We may update this Privacy and Cookie Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will be revised accordingly. Where changes are material, we will take reasonable steps to notify you.
11. Contact Us
For any privacy-related questions, data subject requests, or concerns, please contact us at [email protected] or directly on WhatsApp. We will respond within 30 days.
WhatsApp us