Privacy Policy

1. Data Controller

Gralus Ltd is the data controller responsible for your personal data. You can reach us at info@gralus.co.uk or by post at Unity House, Suite 888 Westwood Park, Wigan, United Kingdom, WN3 4HE.

2. Information We Collect

• Contact data you provide when emailing us — typically your name, email address, organisation and the content of your enquiry.
• Technical data collected automatically, such as IP address, browser type, device information and pages visited.
• Cookie data where you have given consent — see our Cookie Policy.

3. Legal Bases for Processing

• Legitimate interests — to respond to enquiries and deliver our consultancy services.
• Consent — for non-essential cookies and any optional analytics.
• Legal obligation — to comply with applicable UK law.

4. How We Use Your Data

We use the personal data we hold to respond to enquiries, deliver and improve our services, manage our business relationship with clients, and meet our legal and regulatory obligations. We do not sell your data and we do not use it for automated decision-making or profiling.

5. Retention

We retain enquiry correspondence for up to 24 months unless a client relationship is established, in which case data is held for the duration of that engagement plus any period required for tax, accounting or legal purposes (typically up to 7 years).

6. Sharing

We use a small number of carefully selected processors (for example, email and hosting providers) under written agreements. We do not transfer personal data outside the UK or EEA without appropriate safeguards in place.

7. Your Rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data ("right to be forgotten");
• restrict or object to processing;
• request portability of data you have provided;
• withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at info@gralus.co.uk.

8. Complaints

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.

9. Changes

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.