Privacy Policy

1. Introduction

XELTO LTD respects your privacy and is committed to handling personal data responsibly. This document sets out what information we may collect, why we collect it, the legal grounds on which we rely, how long we keep it, who may receive it, and the rights available to you.

We encourage you to read this Privacy Policy carefully. If anything is unclear, or you wish to exercise a data protection right, you can contact us using the details in Section 18.

2. Who We Are

Data controller: XELTO LTD

Registered office: 66 Paul Street, London, England, EC2A 4NA, United Kingdom

Website: https://xelto-ltd.com

Email: info@xelto-ltd.com

XELTO LTD is an IT marketing company based in the United Kingdom. We provide marketing strategy, search visibility, paid campaign management, content marketing, analytics and conversion tracking, and website and e-commerce development services to technology-focused businesses.

For the purposes of UK data protection law, XELTO LTD is the data controller of personal data described in this Privacy Policy, unless we state otherwise in relation to a specific activity.

3. Scope of This Privacy Policy

This Privacy Policy applies to personal data we collect through:

• our website at https://xelto-ltd.com;
• contact forms, enquiry submissions and other communications you send to us;
• email correspondence and other direct communications with XELTO LTD;
• cookies and similar technologies used on our website, as further described in our Cookie Policy.

This Privacy Policy does not apply to third-party websites, platforms or services that may be linked from our website. Those organisations operate under their own privacy terms, and we are not responsible for their practices. Please review their policies before providing personal data to them.

This document is intended for visitors to our website and individuals who contact us in connection with our IT marketing services. It does not cover personal data we process solely on behalf of clients where we act as a data processor under a separate written agreement.

4. Information We Collect

The personal data we collect depends on how you interact with us. We may collect the following categories of information.

Identity Data

Your name, job title, company name and similar details you provide when contacting us or submitting an enquiry.

Contact Data

Your email address and any other contact details you choose to provide, such as a business address included in a message.

Technical Data

Information collected automatically when you use our website, which may include your IP address, browser type and version, device type, operating system, time zone setting, screen resolution and general location derived from IP data.

Usage Data

Information about how you use our website, such as pages visited, time spent on pages, navigation paths, referral source and interaction with site features. This may be collected through cookies and analytics tools where you have consented or where permitted by law.

Communication Data

The content of messages, enquiries and correspondence you send to us, including information about your business, marketing requirements, website details, project goals and any documents or links you include.

Marketing Preferences

Your preferences in relation to receiving marketing or follow-up communications from us, and records of consent or objection where applicable.

We do not intentionally collect special category personal data (such as health information or details about racial or ethnic origin) through our website. Please avoid sending such information unless it is genuinely necessary, and only with your explicit consent or where another lawful basis clearly applies.

5. How Information Is Collected

We collect personal data in the following ways.

Website forms

When you complete our contact form or submit an enquiry through the website, we collect the information you enter, such as your name, email address, company, area of interest and message content.

Cookies and similar technologies

When you visit our website, cookies and similar technologies may collect Technical Data and Usage Data. For further detail on the cookies we use, how they work and how to manage your preferences, please see our Cookie Policy.

Browser and device technologies

Standard web server logs and analytics technologies may automatically record certain Technical Data when you access our site. This helps us maintain security, understand how the website performs and improve its structure and content.

Direct communications

If you email us, respond to a message from us, or otherwise communicate with XELTO LTD directly, we will collect the personal data contained in that correspondence and any information you choose to provide.

6. How We Use Personal Data

We use personal data for the following purposes, depending on the context in which it was provided.

• Responding to enquiries: to read, assess and reply to messages you send through our website or by email, and to arrange follow-up discussions where appropriate.
• Providing information about our services: to explain how XELTO LTD may be able to support your marketing objectives and to share relevant information you have requested.
• Website improvement: to maintain, develop and improve the functionality, content and user experience of our website.
• Analytics: to understand how visitors use our website, which pages are most useful and where improvements may be needed, subject to your cookie preferences.
• Communication: to manage ongoing correspondence, send administrative messages and keep records of our interactions with you.
• Security: to protect our website, systems and business from misuse, unauthorised access, fraud and other security risks.
• Legal compliance: to comply with applicable laws, respond to lawful requests from authorities and establish, exercise or defend legal claims where necessary.

We will not use your personal data in a manner that is incompatible with the purposes for which it was collected, unless we are permitted or required to do so by law and, where appropriate, we inform you.

7. Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing personal data. Depending on the circumstances, we rely on one or more of the following.

Contract

Where processing is necessary to take steps at your request before entering into a contract with you, or to perform a contract to which you are a party. This may apply when you enquire about services and we need to respond or prepare proposals.

Legitimate interests

Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Our legitimate interests may include operating and improving our website, responding to business enquiries, maintaining records of communications, ensuring network and information security, and developing our IT marketing services. We assess each use of data on this basis carefully and balance it against your rights.

Legal obligation

Where processing is necessary to comply with a legal or regulatory obligation to which XELTO LTD is subject, such as obligations relating to record-keeping, tax or responding to lawful requests.

Consent

Where you have given clear consent for us to process your personal data for a specific purpose, such as non-essential cookies or certain marketing communications. You may withdraw consent at any time by contacting us or adjusting your cookie preferences, without affecting the lawfulness of processing carried out before withdrawal.

8. Cookies

Our website uses cookies and similar technologies to support core functionality, measure performance and, where you agree, support analytics and marketing measurement. Cookies may collect Technical Data and Usage Data as described in Section 4.

When you first visit our website, you are presented with choices to accept all cookies, reject non-essential cookies, or manage your preferences through our cookie settings. Your selection is stored so the banner is not shown on every visit.

For full information on the types of cookies we use, how long they last, third parties involved and how to change your preferences, please read our Cookie Policy. That document should be read alongside this Privacy Policy.

9. Data Sharing

We do not sell your personal data. We share personal data only where there is a proper reason to do so and appropriate safeguards are in place.

Service providers

We may share personal data with trusted third-party providers who perform services on our behalf, such as website hosting, email delivery, analytics, IT support and professional administration. These providers process data only on our instructions and are required to protect it appropriately.

Professional advisers

We may disclose personal data to lawyers, accountants, insurers or other professional advisers where reasonably necessary for the management of our business, compliance or the protection of our legal rights.

Legal authorities

We may disclose personal data where required to do so by law, court order or a request from a competent public authority, or where disclosure is necessary to protect the rights, property or safety of XELTO LTD, our users or others.

Business transfers

If XELTO LTD is involved in a merger, acquisition, restructuring or sale of assets, personal data may be transferred as part of that transaction, subject to appropriate confidentiality arrangements and notice where required by law.

We require third parties who handle personal data on our behalf to implement appropriate security measures and to use the data only for the purposes we specify.

10. International Transfers

XELTO LTD is based in the United Kingdom. We aim to store and process personal data within the UK or the European Economic Area where possible.

Some of our service providers may process personal data in countries outside the UK. Where personal data is transferred internationally, we ensure a level of protection essentially equivalent to that under UK GDPR. This may include transfers to countries covered by UK adequacy regulations, or the use of appropriate safeguards such as the UK International Data Transfer Agreement or other approved contractual mechanisms.

If you would like further information about the safeguards applied to a specific transfer, please contact us using the details in Section 18.

11. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements.

As a general guide:

• Enquiry and contact records: retained for a period that allows us to respond, follow up and maintain a reasonable record of business communications, typically up to three years from the last meaningful contact, unless a longer period is required.
• Website and technical logs: retained for a shorter period necessary for security monitoring and troubleshooting, unless a longer period is needed to investigate an incident.
• Cookie-related data: retained in accordance with the durations set out in our Cookie Policy.
• Records required by law: retained for the period required by applicable legislation.

When personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be associated with you.

12. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction. These measures take into account the nature of the data, the risks involved and the context of our processing activities.

Measures may include access controls, secure hosting arrangements, use of encryption where appropriate, staff awareness of data protection responsibilities and procedures for responding to suspected security incidents.

No method of transmission over the internet or electronic storage is completely secure. While we work to protect your personal data, we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, please contact us promptly.

13. Your Rights

Under UK data protection law, you have rights in relation to your personal data. These rights are not absolute and may apply only in certain circumstances.

• Right of access: you may request a copy of the personal data we hold about you and information about how we process it.
• Right to rectification: you may ask us to correct inaccurate personal data or complete incomplete data.
• Right to erasure: you may ask us to delete your personal data in certain circumstances, for example where it is no longer necessary for the purpose for which it was collected.
• Right to restriction: you may ask us to restrict processing in specific situations, such as while we verify the accuracy of data you have contested.
• Right to object: you may object to processing based on legitimate interests or to processing for direct marketing purposes.
• Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request transfer of certain data to you or another organisation in a structured, commonly used format.
• Right to withdraw consent: where we rely on consent, you may withdraw it at any time. This does not affect processing that took place before withdrawal.
• Right to lodge a complaint: you have the right to raise a concern with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. We would appreciate the opportunity to address your concern first.

To exercise any of these rights, contact us at info@xelto-ltd.com. We may need to verify your identity before responding. We aim to respond within one month, although this may be extended in complex cases as permitted by law.

Further information about your rights is available from the ICO at ico.org.uk.

14. Children's Privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from children under the age of 18. If you believe we have collected personal data relating to a child without appropriate authority, please contact us and we will take steps to delete that information promptly.

15. Third-Party Websites

Our website may contain links to external websites, tools or resources operated by third parties. Clicking those links may allow third parties to collect or share data about you. XELTO LTD does not control and is not responsible for the content, privacy practices or security of third-party websites.

We encourage you to read the privacy policies of every website you visit before submitting personal data.

16. Marketing Communications

We may send you information about our IT marketing services where you have requested it, where we have an existing business relationship and the communication is relevant to that relationship, or where you have otherwise consented to receive marketing from us.

You can opt out of marketing emails at any time by using the unsubscribe link in a message (where provided), by telling us that you no longer wish to receive marketing, or by contacting us at info@xelto-ltd.com.

Opting out of marketing does not affect transactional or service-related messages that are necessary to respond to your enquiry or manage an existing engagement.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page.

Where appropriate, we may provide additional notice, such as a prominent message on our website. We encourage you to review this page periodically so you remain informed about how we handle personal data.

Your continued use of our website after an update constitutes acknowledgement of the revised policy, subject to your rights under applicable data protection law.

18. Contact Information

If you have questions about this Privacy Policy, wish to exercise a data protection right, or want to raise a concern about how we handle personal data, please contact:

XELTO LTD
66 Paul Street
London, England
EC2A 4NA
United Kingdom

Email: info@xelto-ltd.com

We will review your request and respond as soon as reasonably practicable, and in any event within the timeframes required by UK data protection law.