1Who we are
Revidon Ltd (“Revidon”, “we”, “us”) is the controller of the personal data described in this notice. We are a company registered in England and Wales under company number 17401187, with our registered office at 13 The Salterns, Chichester Marina, Chichester, West Sussex, PO20 7EJ, United Kingdom.
For any question about this notice or about how we handle personal data, write to guyjackson@revidon.co.uk or to the registered office above. We are not required to appoint a Data Protection Officer, and have not appointed one.
2What this notice covers
This notice explains what personal data Revidon collects, why we use it, how long we keep it and what rights you have. It covers visitors to this website, people who contact us, and people we deal with at organisations we do business with.
It does not cover other organisations’ websites we may link to. Those have their own privacy notices.
3This website
This website serves ordinary pages and nothing more. It sets no cookies for visitors, runs no analytics or tracking, embeds nothing from third-party services, and has no public forms, comments or visitor accounts. Nothing you do here is recorded by us or profiled.
The site is managed through a WordPress administrator login, used only by us. Signing in there sets a session cookie for the person signing in; it does nothing for ordinary visitors, who are never asked to sign in.
Our hosting provider, IONOS, keeps standard server logs, which normally include the visiting IP address, the time of the request, the page requested and the browser identifier. Those logs exist to keep the site running and secure, and we do not use them to identify individual visitors.
4Personal data we handle, and why
Outside the website, the personal data we hold is the ordinary business kind.
| Who | What we hold | Why | Lawful basis |
|---|---|---|---|
| People who email or call us | Name, email address, phone number, and the content of the correspondence | To read, answer and keep a record of what was discussed | Legitimate interests — responding to people who approach us |
| Contacts at counterparties, suppliers and advisers | Name, job title, employer, business contact details, correspondence | To manage the relationship and carry out the work | Legitimate interests, or performance of a contract |
| People who sign a non-disclosure agreement with us | Name, job title, email address, signature, and the signing audit record | To agree, execute and evidence the agreement | Performance of a contract, and our legal interest in being able to prove it |
| Anyone appearing in our accounting records | Names and transaction details | To keep the statutory records a UK company must keep | Legal obligation |
Where we rely on legitimate interests, our interest is in running and protecting a lawful business. We have considered whether that is outweighed by your interests and rights, and we use no more data than the purpose needs. You can object to that use — see section 8.
We do not sell personal data, we do not use it for advertising, and we do not make automated decisions about people or profile them.
5Who else sees it
We share personal data only where there is a reason to, and only as much as the reason needs:
- Service providers acting on our instructions — our email and productivity provider (Microsoft), our website host (IONOS), our electronic signature provider (DocuSign), and our accounting software provider. These are processors: they act on our instructions and cannot use the data for their own purposes.
- Our professional advisers — accountants, and lawyers where we need advice.
- Authorities — where the law requires disclosure, such as to HM Revenue & Customs or in response to a valid legal order.
6Sending data outside the UK
Some of our providers are based outside the United Kingdom, or store data outside it, principally in the United States and the European Economic Area. Where that happens, we rely on UK adequacy regulations where they apply to the country concerned, and otherwise on the International Data Transfer Agreement or the UK Addendum to the European Commission’s standard contractual clauses, together with any additional safeguards the transfer needs.
7How long we keep it
| Record | Kept for |
|---|---|
| General correspondence | Up to 3 years from the last contact, then reviewed and deleted if it serves no purpose |
| Contracts and non-disclosure agreements | The life of the agreement plus 7 years, so that we can defend or enforce it |
| Accounting and tax records | 7 years, meeting the 6-year statutory minimum |
| Website server logs | Short-term only, as set by our hosting provider |
8Your rights
Under the UK GDPR you have the right to:
- ask what personal data we hold about you, and get a copy of it;
- have inaccurate data corrected, or incomplete data completed;
- ask us to erase data where there is no good reason for us to keep it;
- ask us to restrict how we use it while a question about it is resolved;
- object to our use of it where we rely on legitimate interests;
- receive data you gave us in a portable form, where the right applies; and
- withdraw consent at any time, where we relied on consent.
To exercise any of these, email guyjackson@revidon.co.uk. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
9Complaints
If you think we have handled your personal data badly, please tell us first — we would rather put it right. You also have the right to complain to the Information Commissioner’s Office at any time.
Information Commissioner’s Office · Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline 0303 123 1113 · ico.org.uk
10Changes to this notice
We will update this notice when what we do changes. The date below always shows the current version. Where a change matters to you, we will tell you directly.