Privacy Notice – Idela Limited

Effective Date: 23rd June 2025

Last Reviewed: 23rd June 2025

1. Who We Are

Idela Limited (“we”, “us”, “our”) is a UK-based cybersecurity consultancy helping small and mid-sized businesses navigate security compliance and risk management. We are committed to protecting the privacy and rights of individuals whose personal data we process.
Our registered office is:
Idela Limited
85 Great Portland Street, First Floor, London, W1W 7 LT
Company No: 16308234
Email: partners@idelaonline.com

2. What Personal Data We Collect

We may collect and process the following types of personal data:
- Full name and job title
- Business email address and contact number
- Company name and billing information
- IP addresses or device metadata (for website or email analytics)
- Information you provide when contacting us or using our services
We do not intentionally collect sensitive (“special category”) personal data unless legally required.

3. How We Collect Your Data

We collect personal data through:
- Direct communication (e.g. email enquiries, contact forms)
- Business contracts or onboarding documentation
- Website analytics or third-party platforms used for scheduling or invoicing

4. Why We Collect Your Data

We collect personal data for the following purposes:
- To respond to enquiries and provide consulting services
- To manage contracts and deliver services to our clients
- For billing, invoicing, and legal compliance
- To manage professional relationships with suppliers and partners
- To improve our services and maintain security

5. Lawful Basis for Processing

We rely on the following lawful bases under the UK GDPR:
- Contractual necessity – to perform a service you request
- Legitimate interest – for business relationship management and communications
- Legal obligation – to comply with laws (e.g. accounting, record-keeping)

6. Who Has Access to Your Data

Access to personal data is restricted to:
- Idela’s directors and authorised staff
- Trusted third-party suppliers under contract (e.g. web hosting, email providers)
- Legal or regulatory authorities, if required by law
We do not sell your personal data to third parties.

7. Data Security

We take appropriate technical and organisational measures to protect your personal data. This includes:
- Strong password and MFA protection
- Encrypted storage and backups
- Limited access and regular data reviews

8. Data Retention

We retain personal data only as long as necessary for the purpose it was collected, or as required by law (e.g. financial records for HMRC). Data is securely deleted or anonymised when no longer required.

9. Your Rights

Under the UK GDPR, you have the right to:
- Access your personal data
- Correct or update inaccurate information
- Request deletion of your data (“right to be forgotten”)
- Object to or restrict certain types of processing
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights, please email partners@idelaonline.com.

10. Complaints

If you’re unhappy with how we handle your data, we encourage you to contact us directly. You also have the right to lodge a complaint with the ICO at www.ico.org.uk.

11. Changes to This Notice

We may update this notice from time to time. The latest version will always be available on our website.

12. Revoking Consent

If you have previously given consent for Idela Limited to process your personal data, you have the right to withdraw that consent at any time.

You can revoke your consent by:
- Sending an email to partners@idelaonline.com
- Using the contact form on our website to request revocation of consent
- Contacting us directly using any of the communication methods listed in this notice

We will act on your request promptly, typically within 72 hours, and confirm in writing once your consent has been revoked and data processing ceased where applicable.