Who we are. Alex Rius Consultants Ltd is the controller of personal data collected through the website and through direct business enquiries handled through the website. The company is registered in England and Wales under company number 15467706. Contact: info@alexrius-consultants.com.

What this notice covers. This notice explains how we use personal data when you visit the website, contact us, submit an enquiry, subscribe to updates if offered, or otherwise interact with us in connection with our business services.

Personal data we may collect

• identity and contact data, such as name, company, role, email address, telephone number and the contents of your enquiry;

• technical and usage data, such as IP address, browser type, device information, pages visited, approximate location data and cookie identifiers, where relevant to how the website operates;

• marketing preference data, where you ask to receive updates or where you manage cookie or communication preferences.

How we use personal data. We may use personal data to respond to enquiries, provide requested information, consider potential engagements, manage client and supplier relationships, administer the website, maintain security, improve the website and business operations, comply with legal obligations, and send updates where this is lawful and appropriate.

Lawful bases. Depending on the context, we rely on one or more of the following lawful bases: taking steps at your request before entering into a contract; performance of a contract; compliance with a legal obligation; our legitimate interests in running and improving the business, website and services; and consent where consent is required, such as for certain cookies or certain direct electronic marketing.

Who we share data with. We may share personal data with professional advisers, IT and website service providers, analytics providers, communication platform providers, hosting providers and other processors or recipients where reasonably necessary for the purposes described above. We require service providers to handle data appropriately and only on proper instructions where they act as processors.

International transfers. Where personal data is transferred outside the UK, we will seek to ensure that an appropriate safeguard is in place, such as adequacy regulations or approved contractual protections, unless a relevant exception applies.

Retention. We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including to deal with enquiries, manage relationships, meet legal, accounting or insurance requirements, resolve disputes and enforce agreements. Retention periods vary according to the type of data and purpose.

Your rights. Subject to the law, you may have the right to request access to your personal data, rectification, erasure, restriction, objection, portability, and withdrawal of consent where consent is the basis for processing. You also have the right to complain to the Information Commissioner’s Office if you are dissatisfied with how your personal data is handled.

Data security. No method of transmission over the internet or method of electronic storage is completely secure. However, we apply measures that are reasonable and proportionate to the nature of the data and the risks involved.

Changes to this notice. We may update this notice from time to time. The current version should always be published on the website, together with the date of last update.