Privacy notice

We collect only what you give us and what is needed to run the website.

• What you send through the enquiry and contact forms: your name, work email address, phone number, company, the subject and content of your message, your preferred time for a call, and any files you attach.
• What you send us by email, or tell us on a call you have asked for.
• Technical data your browser sends when you visit: IP address, browser type, the pages requested and the time of each request, kept in server logs for security and troubleshooting.
• Your choice of language, kept in a cookie so the website remembers it.

We do not sell personal data. We do not use it to make automated decisions about you, and we do not send you marketing emails unless you ask for them.

• To reply to your enquiry, arrange the call you asked for, and discuss a possible engagement.
• To keep the website secure and working, and to investigate misuse.
• To meet our legal obligations, such as keeping business records.

Where data-protection laws such as the GDPR or the UK GDPR apply, we rely on these grounds: steps you ask us to take before a possible contract, and our legitimate interest in answering business enquiries, when you contact us; our legitimate interest in keeping the website secure, for server logs; and legal obligation, where the law requires us to keep records.

Where we need your consent, we ask for it, and you may withdraw it at any time.

Enquiries submitted through this website, with their attachments, are delivered to our team by email through Amazon Simple Email Service (Amazon SES), which processes them on our behalf. If an enquiry cannot be delivered at once, it is kept on the website’s own server, where only the website can read it, until it has been delivered, and is then deleted from that server.

Within our group, an enquiry is shared only with the people who need it to reply. We may also share data with our professional advisers, or with authorities where the law requires it. Service providers act only on our instructions and must protect the data they handle for us.

Our offices and service providers are in more than one country, so your data may be processed outside the country where you live. Where the law requires it, we protect these transfers with appropriate safeguards, such as standard contractual clauses.

We keep an enquiry for as long as we need it to deal with it and with any engagement that follows, and after that for as long as the law, or the defence of legal claims, requires. Server logs are kept for a limited period for security, and then deleted.

Depending on where you live, you may have the right to access your data, to correct it, to have it deleted, to restrict or object to its use, to receive it in a portable form, and to withdraw your consent. You also have the right to complain to your data-protection authority.

To use any of these rights, contact us as described below. We may need to confirm your identity before we act on a request.

This website uses only cookies that are strictly necessary for it to work and stay secure, such as the one that remembers your language. It uses no advertising or tracking cookies. If that changes, we will update this notice and ask for your consent first.

We protect personal data with technical and organisational measures suited to the risk, including encrypted connections and access limited to the people who need it. No system is completely secure, so please do not send passwords or payment card details through the forms.

We may update this notice from time to time. The current version is always the one on this page.

For questions about privacy, or to make a request about your data, write to contact@xsis.xyz. To make a complaint, write to complaint@xsis.xyz.