Privacy

Last updated: 20th November 2025

This Privacy Notice explains how EOTexpert (“we”, “us” or “our”) collects, uses and protects your personal information when you visit our website eotexpert.co.uk, contact us, or use our services.

We are committed to ensuring your privacy is protected and compliant with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

---

1. Who We Are

We act as the data controller, meaning we decide how your personal data is used.

---

2. What Personal Data We Collect

We may collect and process the following information:

a. Information you provide directly

• Name

• Email address

• Phone number

• Enquiry details (via contact form or email)

b. Information collected automatically

When you visit our website:

• IP address

• Browser type & version

• Device information

• Pages visited & navigation paths

• Time spent on site

• Referral sources

This is typically collected via cookies and analytics tools (see our Cookies Policy for details).

3. How We Use Your Personal Data

We use your data for the following purposes:

• To respond to your enquiries or requests

• To provide and manage our services

• To maintain and improve our website

• To improve your experience

• To send you service or administrative messages

• To send marketing communications (only with your consent)

• To comply with legal obligations

• To analyse website usage (analytics tools)

---

4. Our Legal Bases for Processing

Under UK GDPR, we rely on one or more of the following legal bases:

• Consent – e.g., when you opt in to marketing emails or accept non-essential cookies

• Contract – when processing is necessary to deliver a service you requested

• Legal obligation – when required by law

• Legitimate interests – such as improving our website or preventing fraud

We only rely on legitimate interests when they are not overridden by your rights.

---

5. How We Share Your Data

We may share your personal data with trusted third parties including:

• Website hosting providers

• Email service providers (e.g., contact form tools)

• Analytics providers (e.g., Google Analytics)

• Professional advisers (e.g., accountants, legal advisors)

• Regulatory authorities if required by law

We never sell your personal data.

All third parties are required to process data in accordance with the UK GDPR.

---

6. International Transfers

Some third-party providers (e.g., Google) may store data outside the UK.

When this occurs, we ensure adequate safeguards are in place, such as:

• UK-approved International Data Transfer Agreements (IDTAs)

• Standard Contractual Clauses (SCCs)

• Adequacy regulations approved by the UK government

---

7. How Long We Keep Your Data

We keep personal data only for as long as necessary:

• Enquiry data: up to 12 months

• Client data: up to 7 years (for tax and accounting purposes)

• Analytics data: typically 26–38 months depending on settings

• Marketing preferences: until you withdraw consent

After this, data is securely deleted or anonymised.

---

8. Your Rights Under UK GDPR

You have the right to:

• Access your personal data

• Correct inaccurate data

• Erase your data (“right to be forgotten”)

• Restrict processing

• Object to processing (including marketing)

• Data portability

• Withdraw consent at any time

• Complain to the ICO if you believe your rights have been breached

To exercise any of these rights, contact us at [email protected]

---

9. Marketing Communications

We will only send marketing emails if you have opted in.

You can unsubscribe at any time by clicking the link in our emails or contacting us.

---

10. Security Measures

We take appropriate security measures to protect your personal data, including:

• Secure hosting

• HTTPS encryption

• Access controls

• Regular security updates (including WordPress and plugins)

However, no online system is completely secure, so we cannot guarantee absolute security.

---

11. Third-Party Links

Our Website may include links to external sites. We are not responsible for the privacy practices of those websites, and you should review their privacy notices.

---

12. Updates to This Privacy Notice

We may update this Privacy Notice to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a new “Last updated” date.