Introduction

This Privacy Policy explains how Infionis Ltd (“Infionis”) collects, uses, stores, and protects personal information when users interact with the Infionis website. Infionis is committed to maintaining privacy, protecting personal information, and operating in full compliance with UK GDPR and applicable data protection laws. Infionis operates fully remotely and does not access client systems, third‑party systems, or client‑owned software platforms. Infionis does not store or retain client data beyond what is necessary for communication.

Definitions

Infionis refers to Infionis Ltd. Website refers to the Infionis website and all content published on it. User refers to any individual or organisation accessing or using the Website. Personal data refers to any information that identifies or can identify a User. Processing refers to any operation performed on personal data.

Personal Data Infionis Collects

Infionis collects minimal personal data. This may include:

• name

• organisation

• contact details submitted through the Website contact form

• information voluntarily provided in enquiries

Infionis does not collect:

• system access credentials

• operational data

• technical logs from client systems

• sensitive personal data unless explicitly provided by the User

Infionis does not use automated decision‑making or profiling.

How Personal Data Is Collected

Personal data is collected only when Users:

• submit a form on the Website

• request information

• initiate a structured conversation

• engage with Infionis through the Website

Infionis does not collect personal data through:

• system integrations

• third‑party platforms

• client systems

• background data harvesting

• cookies used for tracking or advertising

How Personal Data Is Used

Infionis uses personal data solely for:

• responding to enquiries

• providing requested information

• arranging structured conversations

• preparing for potential consultancy engagements

• maintaining communication with Users who have contacted Infionis

Infionis does not:

• sell personal data

• share personal data with third parties for marketing

• use personal data for advertising

• use personal data for analytics beyond basic Website functionality

Legal Basis for Processing

Infionis processes personal data under the following lawful bases:

• consent when Users submit information voluntarily

• legitimate interest when responding to enquiries or maintaining communication

• contractual necessity when preparing or discussing potential engagements

Infionis does not rely on any other lawful bases.

Data Storage and Retention

Infionis stores personal data securely and retains it only for as long as necessary to:

• respond to enquiries

• maintain communication

• prepare for potential engagements

• meet legal obligations

Infionis does not:

• store client data long‑term

• retain operational or system data

• maintain archives of client information

• store personal data in client or third‑party systems

Personal data is deleted when:

• communication is complete

• an enquiry is resolved

• retention is no longer necessary

• a User requests deletion

Data Sharing

Infionis does not share personal data with:

• third‑party vendors

• marketing organisations

• advertisers

• external platforms

• analytics providers beyond basic Website functionality

Personal data may be shared only when:

• required by law

• necessary to protect Infionis’ legal rights

• explicitly requested by the User

Data Security

Infionis applies structured and disciplined controls to protect personal data. This includes:

• secure communication channels

• restricted access to personal data

• controlled internal storage

• deletion of data when no longer required

Infionis does not use:

• client systems

• third‑party systems

• external data platforms

• cloud services owned by clients

User Rights

Users have the following rights under UK GDPR:

• right to access personal data

• right to correct inaccurate data

• right to request deletion

• right to restrict processing

• right to object to processing

• right to withdraw consent

• right to lodge a complaint with the Information Commissioner’s Office (ICO)

Infionis will respond to all rights requests in a structured and timely manner.

Cookies

The Website may use basic cookies required for functionality. Infionis does not use:

• advertising cookies

• tracking cookies

• behavioural analytics cookies

• third‑party marketing cookies

Details are provided in the Infionis Cookie Policy.

External Links

The Website may contain links to external websites. Infionis does not control external websites, is not responsible for their privacy practices, and is not liable for any loss arising from their use. Users should review external privacy policies independently.

Limitation on Claims

Any claim relating to privacy or data handling must be raised in writing, documented, supported by evidence, and submitted within 30 days of the event giving rise to the claim. No claim may be raised after 30 days or after termination or expiry of any contractual relationship with Infionis. Claims raised outside these periods are invalid, unenforceable, and permanently barred.

Updates to This Policy

Infionis may update this Privacy Policy at any time. Continued use of the Website indicates acceptance of updated terms.

Contact

For questions regarding this Privacy Policy, please contact Infionis through the Contact page on the Website.