Privacy Notice

1. Who We Are

OPEXA LTD ("OPEXA", "we", "our", "us") is a business consultancy and innovation studio registered in Scotland. We are committed to protecting and respecting your privacy. This notice explains how we collect, use, store and share your personal data when you interact with us, visit our website or use our services.

2. Information We Collect

We may collect and process the following personal data:

• Identity and contact data: name, email address, phone number, job title and company name
• Communication data: any information you provide when you contact us via email, our website or other channels
• Technical data: IP address, browser type and version, time zone, operating system and platform when you visit our website
• Usage data: information about how you use our website, including pages visited and navigation paths

3. How We Collect Your Data

We collect personal data through:

• Direct interactions: when you contact us, request our services, subscribe to communications or exchange business cards
• Automated technologies: cookies and similar technologies when you visit our website
• Third parties: referrals from business contacts, publicly available sources such as LinkedIn or Companies House

4. How We Use Your Data

We use your personal data for the following purposes:

• To provide and manage our consultancy and advisory services
• To respond to enquiries and communicate with you
• To send relevant updates, insights or thought leadership content where you have consented or where we have a legitimate interest
• To improve our website, services and user experience
• To comply with legal and regulatory obligations

5. Legal Basis for Processing

We process your personal data on the following legal bases under the UK General Data Protection Regulation (UK GDPR):

• Contractual necessity: where processing is required to perform or enter into a contract with you
• Legitimate interests: where we have a business need to process your data that does not override your rights, such as networking, business development and improving our services
• Consent: where you have given us explicit consent, for example to receive marketing communications
• Legal obligation: where we are required to process data to comply with the law

6. Data Sharing

We do not sell your personal data. We may share your data with:

• Trusted service providers who assist us in operating our website or delivering our services (e.g. hosting, analytics, email services)
• Professional advisors such as accountants or legal counsel
• Regulatory authorities where required by law

All third parties are required to respect the security of your personal data and treat it in accordance with applicable law.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. Contact and communication data is typically retained for up to three years after our last interaction, unless a longer retention period is required by law.

8. Data Security

We have put in place appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration or disclosure. Access to your personal data is restricted to those who have a business need to access it.

9. Your Rights

Under UK data protection law, you have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Object to processing based on legitimate interests
• Request restriction of processing
• Request data portability
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at connect@opexa.co.uk.

10. Cookies

Our website may use cookies and similar technologies to enhance your browsing experience and gather analytical data about website usage. You can manage your cookie preferences through your browser settings. Essential cookies required for the website to function may not be disabled.

11. Changes to This Notice

We may update this privacy notice from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this notice periodically.

12. Contact Us

If you have any questions about this privacy notice or how we handle your personal data, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have not been respected.