Eranos Limited ("Eranos", "we", "us", "our") is a company registered in England and Wales (Company No. 16238960), with our registered office at 63 Kempshott Road, London, SW16 5LJ.
We are the data controller for the personal data collected through this website. We are registered with the Information Commissioner's Office (ICO) under registration number ZC114110.
If you have any questions about how we handle your data, please contact us at: hello@eranos.co.uk
When you use the contact form on our website, we collect:
We do not collect any data automatically through cookies, analytics tools, or tracking technologies beyond those strictly necessary for the website to function.
We use the information you provide solely to:
We do not use your data for marketing purposes without your explicit consent, and we do not sell or share your data with third parties for commercial purposes.
We process your personal data on the basis of legitimate interests under UK GDPR Article 6(1)(f). Our legitimate interests are: responding to business enquiries, assessing potential working relationships, and maintaining records of our communications.
Submission of the contact form is a voluntary act. You may request deletion of your data at any time — see Section 6.
Where you use the Eranos client portal, we process your personal data on the basis of contract under UK GDPR Article 6(1)(b) — providing the portal is part of the services we have agreed to deliver. The access records described in Section 9 are held on the basis of legitimate interests: keeping your data secure, and meeting our record-keeping obligations as an ICAEW-regulated firm.
Retention periods depend on whether an engagement results from your initial contact:
Data will not be retained beyond the applicable period and will be securely deleted when that period ends.
Under UK GDPR, you have the right to:
These rights are not absolute. In particular, the access and audit records described in Section 9 are kept for six years and cannot be deleted: as an ICAEW-regulated firm we are required to maintain a reliable record of who has accessed client information, and that record is designed so that it cannot be altered after the event. Where you ask us to erase your data, we meet that request for these records by removing the information that identifies you from them, rather than by deleting the records themselves.
To exercise any of these rights, please contact us at hello@eranos.co.uk. We will respond within 30 days.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113
Where you use the Eranos Platform or any other Eranos product or technical service, we may create anonymised and aggregated derivatives of your data for the purposes of product development, industry benchmarking, and research. No individual or company can be identified from these derivatives. They are not personal data and are not subject to the retention and deletion obligations that apply to your identifiable data. Further detail is set out in our client Terms and Conditions of Business (provided at the start of a formal engagement), Clause 13.
If you have access to our client portal, we record your email address, when you sign in, and the actions you take there — including which documents you open, download, or approve.
Eranos maintains these records for two reasons: to protect your data, and to keep a proper record of who has accessed and approved what, in line with our obligations as an ICAEW-regulated firm. This means access to a specific document is, by design, traceable to the person who accessed it — the same way a firm would keep a record of who received a paper board pack.
This record is visible to Eranos as part of the normal operation of the portal, including at the level of individual documents and actions. At organisation level, it also lets us see when your organisation last used the portal.
In operating our business, we use the following third-party services that may process personal data on our behalf. All processors are subject to data processing agreements consistent with UK GDPR requirements.
If you have access to the Eranos client portal, we additionally use the following processors:
For clients engaged under a formal agreement, a more detailed list of processors relevant to your specific engagement is set out in the Data Processing Annex of our Terms and Conditions of Business.
We may update this policy from time to time. Any changes will be posted on this page with an updated date.