Privacy Policy

1. Who We Are

Vexora Solutions Ltd is the data controller responsible for your personal data. Registered in England & Wales. Director: Andy-Ken Karibwami. Contact: andy@vexora-solutions.co.uk.

2. Data We Collect

We collect the following personal data when you contact us or engage our consulting services:

• Name, email address, and phone number
• Company name and business details provided during scoping
• Information submitted via our contact form or by email
• Technical data (IP address, browser type) collected automatically via our website

3. How We Use Your Data

We use your personal data solely to:

• Respond to enquiries and provide quotes or proposals
• Deliver contracted consulting services
• Maintain client records and comply with our legal and financial obligations
• Communicate updates relevant to your engagement

We do not use your data for marketing, profiling, or any purpose beyond what is described here without your explicit consent.

4. Legal Basis for Processing

5. Data Retention

Personal data is retained for 6 years from the end of an engagement in accordance with HMRC requirements. Enquiry data from contacts that do not result in an engagement is retained for no longer than 12 months. After the applicable retention period, data is securely and permanently deleted.

6. Third Parties

We do not sell, share, or transfer your personal data to third parties, except where:

• Required by law or regulatory authority
• Strictly necessary to deliver the agreed services (e.g. cloud storage or communications providers)

Any such third parties are subject to appropriate data protection agreements and are prohibited from using your data for their own purposes.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data where no legal obligation to retain it exists
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, email andy@vexora-solutions.co.uk. We will respond within 30 days.

8. Cookies

For information on how we use cookies on this website, please see our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be reflected by an updated date at the top of this page. Continued use of our services following an update constitutes acceptance of the revised policy.