Privacy Policy

Last updated: June 2026

1. Who We Are

Eranos Limited ("Eranos", "we", "us", "our") is a company registered in England and Wales (Company No. 16238960), with our registered office at 63 Kempshott Road, London, SW16 5LJ.

We are the data controller for the personal data collected through this website. We are registered with the Information Commissioner's Office (ICO) under registration number ZC114110.

If you have any questions about how we handle your data, please contact us at: hello@eranos.co.uk

2. What Data We Collect

When you use the contact form on our website, we collect:

  • Your name
  • Your email address
  • Your role or business type (if provided)
  • The content of your message

We do not collect any data automatically through cookies, analytics tools, or tracking technologies beyond those strictly necessary for the website to function.

3. How We Use Your Data

We use the information you provide solely to:

  • Respond to your enquiry
  • Assess whether and how we may be able to work together
  • Maintain a record of our communications with you

We do not use your data for marketing purposes without your explicit consent, and we do not sell or share your data with third parties for commercial purposes.

4. Legal Basis for Processing

We process your personal data on the basis of legitimate interests under UK GDPR Article 6(1)(f). Our legitimate interests are: responding to business enquiries, assessing potential working relationships, and maintaining records of our communications.

Submission of the contact form is a voluntary act. You may request deletion of your data at any time — see Section 6.

5. How Long We Keep Your Data

Retention periods depend on whether an engagement results from your initial contact:

  • Enquiries that do not lead to a formal engagement — up to 3 years from the date of last contact, unless you ask us to delete sooner.
  • Engaged clients — 6 years from the end of the engagement, in accordance with ICAEW regulatory requirements and the Limitation Act 1980.

Data will not be retained beyond the applicable period and will be securely deleted when that period ends.

6. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct any inaccurate or incomplete data
  • Erase your data (the "right to be forgotten")
  • Restrict how we process your data
  • Object to processing based on legitimate interests
  • Portability — receive your data in a structured, machine-readable format

To exercise any of these rights, please contact us at hello@eranos.co.uk. We will respond within 30 days.

7. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113

8. Anonymised and aggregated data

Where you use the Eranos Platform or any other Eranos product or technical service, we may create anonymised and aggregated derivatives of your data for the purposes of product development, industry benchmarking, and research. No individual or company can be identified from these derivatives. They are not personal data and are not subject to the retention and deletion obligations that apply to your identifiable data. Further detail is set out in our client Terms and Conditions of Business (provided at the start of a formal engagement), Clause 13.

9. Data Processors We Use

In operating our business, we use the following third-party services that may process personal data on our behalf. All processors are subject to data processing agreements consistent with UK GDPR requirements.

  • Web3Forms — processes contact form submissions from this website on our behalf
  • Microsoft 365 (Microsoft Corporation) — email, documents, and business communications; UK GDPR covered, UK Transfer Addendum in place
  • HubSpot (HubSpot, Inc.) — CRM and client relationship management; UK GDPR covered, UK Transfer Addendum in place
  • Anthropic (Claude) — AI assistant used in the provision of services; client data not used for AI training; UK Transfer Addendum in place
  • Perplexity AI — research and analysis (Enterprise plan); client data not used for AI training; UK Transfer Addendum in place
  • Gamma (Gamma Tech, Inc.) — presentation and document creation; UK Transfer Addendum in place
  • Canva — design and visual content creation
  • GitHub / Visual Studio Code (Microsoft Corporation) — software development; covered under Microsoft DPA

For clients engaged under a formal agreement, a more detailed list of processors relevant to your specific engagement is set out in the Data Processing Annex of our Terms and Conditions of Business.

10. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date.