Privacy Notice

Eudira is responsible for personal information collected through eudira.com.

Contact: info@eudira.com.

This notice covers personal information submitted through the Eudira website, particularly requests for private access, and limited technical information processed to keep the website and enquiry form secure.

It does not govern information processed within a customer deployment of Eudira, which will be addressed by the applicable customer terms and data-protection arrangements.

For an access request, Eudira may collect:

• name;
• company or organisation;
• email address;
• the work or capability under consideration;
• the organisation’s current alternative;
• the outcome that would make the investment valuable;
• additional information supplied by the sender;
• submission date and time; and
• limited technical and security information, including request metadata and short-lived pseudonymous identifiers derived from an IP address or email address for rate limiting and abuse prevention.

When a page loads, the browser also sends limited request data, such as an IP address and browser details, to the providers Eudira uses to deliver fonts and interactive visual content.

Please do not include special-category personal data, criminal-offence data or confidential third-party information in an enquiry unless it is genuinely necessary for the enquiry.

Eudira uses this information to:

1. assess and respond to an access, research or partnership enquiry;
2. take steps requested before a possible contract or commercial relationship;
3. maintain an appropriate record of discussions and decisions;
4. deliver the website, including fonts and interactive visual content, and maintain its performance;
5. secure the website, and prevent spam, automated abuse and duplicate submissions;
6. comply with legal obligations; and
7. establish, exercise or defend legal claims where necessary.

The lawful bases for this processing are:

• steps taken at the individual’s request before entering a contract, where applicable;
• legitimate interests in receiving and evaluating genuine business enquiries, delivering and operating a secure, performant website, maintaining proportionate business records and protecting Eudira from abuse or legal risk; and
• compliance with legal obligations where applicable.

The Access form is not used to obtain consent for direct marketing. A submission does not subscribe the sender to marketing communications.

When relying on legitimate interests, Eudira considers whether the processing is necessary and whether the sender’s rights and interests override the business purpose. This includes delivering the website and keeping it performant. The information requested is limited to what is reasonably needed to understand and respond to the enquiry. Abuse-prevention identifiers are pseudonymised and kept only briefly.

Information may be shared only where necessary with:

• people working for or on behalf of Eudira who need it to assess or respond to the enquiry;
• hosting, database, email-delivery and security providers, including Lovable and Supabase;
• website-delivery providers that serve fonts and interactive visual content when a page loads, including Google Fonts and Spline, which receive limited request data such as an IP address and browser details;
• professional advisers; and
• courts, regulators, law-enforcement bodies or other authorities where legally required.

Eudira does not sell personal information.

Some providers may process personal information outside the United Kingdom. The transfer mechanism depends on the provider and destination. Where UK data-protection law requires a safeguard, the applicable arrangement may include an adequacy regulation, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any required data-protection assessment. Information about the safeguard applicable to a particular provider may be requested from info@eudira.com.

• The initial Access-form database record is scheduled for deletion 12 months after submission and is removed during the next scheduled cleanup, normally within a further 15 minutes, unless the enquiry progresses or a longer period is reasonably required for legal purposes.
• Where an enquiry progresses into a commercial relationship, relevant information may be retained as part of the relationship records for its duration and normally for up to six years after it ends, subject to legal requirements and any necessary legal hold.
• Correspondence and notification emails relating to an enquiry are separate business records. They are retained only for as long as they are needed for the enquiry, any commercial relationship, legal obligations or the establishment, exercise or defence of legal claims.
• Rate-limit counters cease to affect submissions when their relevant window ends, which is no more than 24 hours. The pseudonymous database record is removed during the next scheduled cleanup, normally within a further 15 minutes.
• Infrastructure providers may keep operational or security logs under their own controlled retention schedules. Eudira limits its use of those logs to operational and security purposes.

Depending on the circumstances, individuals may have rights to:

• access their personal information;
• correct inaccurate information;
• request erasure;
• restrict processing;
• object to processing based on legitimate interests;
• receive information in a portable form where the statutory conditions apply; and
• complain to the Information Commissioner’s Office.

Requests should be sent to info@eudira.com. Identity may need to be verified before a request is fulfilled.

Providing the required Access-form information is not a statutory obligation. It is needed to assess and respond to the request. Eudira may be unable to consider the request if the required information is not provided.

Eudira does not use Access-form information to make a solely automated decision that produces legal or similarly significant effects on the sender.

Questions or complaints should first be sent to info@eudira.com. Individuals also have the right to complain to the UK Information Commissioner’s Office.

Eudira may update this notice when its services, providers or legal obligations change. The current version and update date will remain available on this page.