1. Scope
This policy explains how Eridian Solutions collects and uses personal information relating to website visitors, enquirers, clients, suppliers and other business contacts.
Where Eridian processes information only on a client's instructions through a client system, the client is normally the controller and Eridian is the processor.
2. Information we collect
- Identity and contact details, including your name, role, business, email address and telephone number.
- Information submitted through the enquiry form, including your workflow, current tools, requirements, budget range and messages.
- Discovery, project, contract, billing and support information.
- Technical and security information, such as IP address, browser information, server logs and form-submission metadata recorded by hosting or security providers.
How we receive it
Information is collected when you contact us, submit the website enquiry form, complete discovery documents, enter into a contract, use support services or correspond with us.
3. How we use information
| Purpose | Typical lawful basis |
|---|---|
| Responding to enquiries and preparing proposals | Legitimate interests and steps requested before entering a contract |
| Delivering software, support, hosting and integrations | Contract and legitimate interests |
| Billing, accounting and tax records | Contract and legal obligation |
| Security, fraud prevention and service improvement | Legitimate interests and legal obligation where applicable |
| Legal claims, compliance and professional advice | Legal obligation and legitimate interests |
5. Retention and security
Enquiry records are normally retained for up to 24 months after the last meaningful contact. Contracts, invoices and accounting records are normally retained for at least six years after the relevant financial year or contract end. Project and support records are retained for the contract term and a reasonable period afterwards.
Proportionate safeguards include access controls, multi-factor authentication where available, encrypted services, device security, backups, data minimisation and supplier review.
6. Your rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict your personal information; object to processing; receive portable data; and withdraw consent. Rights can be limited by legal obligations or exemptions.
Eridian Solutions does not use personal information for solely automated decisions producing legal or similarly significant effects unless specifically agreed with appropriate safeguards.
7. Contact and complaints
Send requests or concerns to ben@eridian-solutions.com. Please contact Eridian Solutions first so the concern can be addressed.
You may also complain to the Information Commissioner's Office at ico.org.uk.
This policy may be updated when services, suppliers or legal requirements change.