Privacy Policy

Privacy Policy

Last updated: March 2026

1. Who We Are

Io Technologies Ltd ("we", "us", "our", or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

2. What Data We Collect

We collect information you provide directly and information collected automatically when you interact with our website and services:

2.1 Information You Provide

• Contact      information: name, email address, phone number, mailing address
• Account      information: login credentials, profile details, preferences
• Communication      data: messages, enquiries, feedback, support requests
• Training      and consulting data: attendance records, assessment results, learning      preferences
• Payment      information: billing address, transaction history (processed by secure      payment providers)

2.2 Information Collected Automatically

• Technical      data: IP address, browser type, device type, operating system, pages      visited
• Usage      data: time spent on pages, clicks, interactions, referrer information
• Cookies      and similar technologies: as described in our Cookie Policy
• Location      data: general geographic location (if permitted)

3. How We Use Your Data

We process your personal data for the following purposes:

• Delivering      training, consulting, and system design services
• Processing      bookings, registrations, and payments
• Communicating      with you about services, updates, and promotions
• Responding      to enquiries and providing customer support
• Improving      our website, services, and user experience
• Analytics      and performance monitoring
• Complying      with legal obligations and resolving disputes
• Marketing      activities (only with your consent where required)

4. Legal Basis for Processing

Under UK GDPR and the Data Protection Act 2018, we process your data on the following legal bases:

• Contract:     To perform services you have requested or entered into with us
• Consent:     Where you have given explicit consent to specific processing (e.g.,      marketing)
• Legal      Obligation: To comply with UK law, tax requirements, and regulatory      obligations
• Legitimate      Interests: For business operations, fraud prevention, and improving      services, where these interests are not overridden by your rights

5. Cookies

We use cookies and similar tracking technologies to enhance your experience. Please see our separate Cookie Policy for detailed information about:

• Types      of cookies we use
• How      to manage cookie preferences
• Third-party      analytics providers

6. Data Sharing and Disclosure

We do not sell your personal data. We only share your information with:

• Service      Providers: Third parties who assist with payment processing, email      delivery, hosting, analytics, and customer support
• Professional      Advisors: Accountants, solicitors, and auditors as needed
• Legal      Requirements: When required by law enforcement, courts, or regulatory      authorities
• Successors:     In the event of business merger, acquisition, or asset sale

All third parties are contractually bound to process data securely and only for specified purposes.

7. Data Retention

We retain your personal data for as long as necessary to provide services and fulfil the purposes outlined in this policy:

• Account      and service data: during engagement and for 7 years for accounting/legal      purposes
• Training      and assessment records: for the duration of the relationship and 5 years      thereafter
• Marketing      data: until you unsubscribe or we cease contact attempts
• Technical      and usage data: typically for 12 months

We delete or anonymise data when no longer needed, unless legal obligations require retention.

8. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

8.1 Right of Access

You have the right to request a copy of the personal data we hold about you and information about how we process it.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure

You have the right to request deletion of your data ("right to be forgotten") in certain circumstances, such as when the data is no longer necessary for its purpose.

8.4 Right to Restrict Processing

You can request that we limit how we use your personal data while we verify its accuracy or establish a legal basis for its use.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request we transfer it to another controller.

8.6 Right to Object

You can object to processing of your data for legitimate interests and direct marketing purposes.

8.7 Rights Related to Automated Decision-Making

You have the right not to be subject to automated decision-making that produces legal or significant effects concerning you.

9. Exercising Your Rights

To exercise any of the rights above, please submit a data subject access request in writing to:

Email: founder@io-technologies.co.uk

Please include sufficient information to identify you and specify the right you wish to exercise. We will respond within 30 days (or up to 90 days for complex requests). You will not be charged for reasonable requests, though we may charge a reasonable fee for excessive or repetitive requests.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Encrypted      data transmission (SSL/TLS)
• Secure      password protection and authentication
• Access      controls and staff training
• Regular      security updates and monitoring

However, no security system is completely secure, and we cannot guarantee absolute protection.

11. International Data Transfers

Your data is primarily processed within the United Kingdom. Where we transfer data outside the UK to countries without equivalent data protection laws, we implement appropriate safeguards such as standard contractual clauses.

12. Complaints and the ICO

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Email: casework@ico.org.uk
Website: www.ico.org.uk

You can also contact us first to resolve any concerns.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, law, or other factors. We will notify you of any material changes by updating the "Last updated" date and, where appropriate, by sending you notice. Your continued use of our services indicates acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or wish to exercise your rights, please contact us:

Io Technologies Ltd
Email: founder@io-technologies.co.uk