Request a free quote

Privacy Policy – EDPO UK Ltd

Click Here to Read EDPO's Privacy Policy
Click Here to Read EDPO CH's Privacy Policy

At EDPO UK, we are committed to protecting and respecting your personal data.

This privacy policy (the “Policy”) explains when and why we collect your personal information, how we use it, the conditions under which we may disclose it to others and how we keep it secure. The processing of your personal data will be carried out in accordance with the principles set under the United Kingdom General Data Protection Regulation (“UK GDPR”).

We may change this Policy from time to time, so please check this page occasionally to ensure that you’re aware of any changes.

This Policy is intended for the website www.edpo.com and does not apply to other websites that could potentially be accessed by clicking external links.

A. Data controller

The data controller of the processing activities carried out through the website is EDPO UK LTD., a limited liability company incorporated under the laws of England and Wales, with registered office at 8 Northumberland Avenue, London, WC2N 5BY, United Kingdom, registered with the Registrar for Companies of England and Wales under number 12945565.

EDPO UK is not required to have a data protection officer, so any enquiries about our use of your personal data should be sent to the contact details provided below:

  • By email to privacy@edpo.com
  • By postal mail to 8 Northumberland Avenue, London, WC2N 5BY, United Kingdom.

B. Personal data subject to processing

“Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, mental, economic, cultural or social identity of that natural person.

If you visit our website, we may collect the following personal data:

1. Data provided on a voluntary basis

You may voluntarily provide personal data to us when interacting with our website or services. This may include, in particular, your name and e-mail address, for example when subscribing to our newsletter or downloading information or documents that we make available.

You may also provide additional contact details, professional information and company-related details when you request a fee quote, complete our free assessment test, use our services, or otherwise communicate or interact with us through any of the available means on this website.

In addition, you may provide personal data when submitting a UK GDPR request through our website’s forms.

You may also provide personal data if you use Tidio, a chat platform on our website that enables website visitors to interact with a chatbot and/or EDPO UK’s team. Tidio is strictly reserved for sales-related inquiries. Your personal data (specifically IP Data), including information that you voluntarily share through the chat function, is processed with your consent. Messages and related data are stored within the Tidio application. For further information, please refer to Tidio’s Privacy Policy.

2. Browsing Data

  • Website usage: our website infrastructure and service providers may process information including the type of browser you use, access times, pages viewed, your IP address, your general location and the page you visited before navigating to our website.
  • Device information: we collect information about the computer or mobile device you use to access our website, including the hardware model, operating system and unique device identifiers.
  • Information collected by cookies and other tracking technologies: EDPO UK and our service providers use various technologies to collect information, including cookies. Cookies are small data files stored on your hard drive or in device memory that help us improve our services and your experience, see which areas and features of our services are popular, and count visits. See the list of cookies below:
  • Google Analytics data. Where you consent to analytics technologies, we use Google Analytics 4 (“GA4”) to collect information about how you interact with our website. This may include pseudonymous cookie or device identifiers, pages viewed, events and interactions, referral and campaign information, browser and device information, and approximate geographic information. EDPO UK configures GA4 so that names, email addresses, telephone numbers, company names, messages and other information entered into website forms are not sent to Google Analytics. EDPO UK does not send a proprietary User ID to GA4.
  • Google Analytics uses an IP address transiently to determine approximate geographic information. For users in the European Union, Switzerland and the United Kingdom, Google states that individual IP addresses are discarded before Analytics logs the measurement data and are not logged or stored by GA4.
  • Where you have provided the relevant consent, we also use Google Signals. Google Signals may associate Analytics data with information relating to users who are signed in to their Google account and who have consented to such association, enabling behavioural, cross-device, demographic and interest reporting.
  • Where you consent to analytics technologies, your Google Analytics identifier may also be linked across edpo.com and edsr.eu, so your browsing activity on one of these websites may be connected with your activity on the other as part of a single measurement journey.

C. Cookies

Please find below more information about the providers we use that process cookies on our website:

D. Purposes and legal basis of the processing

The personal data you provide when using the website will be processed for the purposes indicated below:

  1. The handling of regulatory requests (from data subjects or from representatives of competent UK authorities): personal data is processed in order to receive and handle regulatory requests under relevant United Kingdom (“UK”) Regulations, such as, but not limited to, the UK GDPR. This includes situations where we transmit your personal data to our clients, as their representative under the relevant UK Regulations, for the purpose of enabling them to handle your request. The legal basis for this processing is your consent.
  2. The handling of sales inquiries and requests for information related to our services or resources. The legal basis for this processing is your consent.
  3. Compliance with EDPO UK’s legal obligations under relevant UK Regulations when acting as a representative under such Regulations. The legal basis for this processing is the compliance with a legal obligation.
  4. Website analytics and campaign measurement. We process website usage and analytics data to measure website traffic and performance, understand how visitors interact with our website, improve its content, navigation and usability, and measure the effectiveness and conversion performance of our communications and advertising campaigns. Where the relevant consent has been provided, we also use Google Signals to support behavioural, cross-device, demographic and interest reporting. The legal basis for this processing is your consent. Analytics and advertising-measurement technologies are activated only after the visitor has provided the relevant consent through Cookiebot, in accordance with their consent choices.
  5. Statistical analysis on aggregated or anonymous data, aimed at measuring the functioning of the website, traffic, usability, and interest, as well as to operate, optimize and maintain our website, system administration and security. The legal basis for this processing is, when applicable, your consent.
  6. Newsletters and communication relating to our services. The legal basis for this processing is your consent or, when applicable, our legitimate interest.
  7. The establishment, exercise or defence of legal claims. The processing of this data is based on our legitimate interest in ensuring judicial or extrajudicial protection whenever necessary.

E. Recipients

Your personal data may be disclosed, in close relation to the purposes specified above, only to:

a) Persons authorised to process your personal data, who are committed to/or under an appropriate legal obligation of confidentiality (e.g., EDPO UK’s team members);

b) Consultants, subcontractors and other service providers who need access to such information to carry out work on our behalf or to assist us in the provision of our website and other business-related functions such as website analytics;

c) In connection with our use of Google Analytics 4 and Google Ads, analytics and measurement data is processed by Google Ireland Limited and may also be processed by authorised Google group entities and sub-processors, including Google LLC in the United States, in accordance with the applicable Google data-protection terms;

d) Our clients, in the context of requests we receive as their representative under relevant UK Regulations;

e) Competent authorities, where necessary in the context of regulatory or supervisory inquiries related to our clients, in the context of which you may be a data subject;

f) Law enforcement agencies and public authorities when so required by applicable laws.

F. Your Rights as a Data Subject

You have the following rights:

• Right to withdraw your consent

If we have asked for your consent to process your personal data, you may withdraw that consent at any time. Where processing is based on your consent to cookies or similar technologies, you may change or withdraw your choices at any time using the Cookie Settings control available on our website through Cookiebot.

• Right of access

You can ask us what information we hold about you, and you can ask for copies of your personal data.

• Right to Rectification

You can ask us to correct your personal data if it is inaccurate or to complete if it is incomplete.

• Right of erasure

You have the right to ask us to delete your personal data in certain circumstances (for example, if we no longer need your personal data, if you initially consented to the use of your personal data but have now withdrawn your consent, if you have objected to the use of your personal data and your interests outweigh our interests).

• Right to restrict the processing

In certain circumstances, you have the right to ask us to stop using your personal data for a period of time (for example, if you believe we are not doing so lawfully).

• Right to object to the processing

You have a right to object to the processing of your personal data where we rely on our legitimate interests to process your Personal Data.

• Right to data portability

You have the right to ask that we transfer the personal data that you shared with us to another provider or that we give you a copy in a machine-readable format so that you can transfer it to another provider.

How you can access and update your information

The accuracy of your information is important to us. If you change your e-mail address, or if any of the other information we hold is inaccurate or out of date, please send us an e-mail at privacy@edpo.com or write to us at 8 Northumberland Avenue, London, WC2N 5BY, United Kingdom.

Security precautions in place to protect the loss, misuse or alteration of your information

As part of our commitment to information security, we are ISO 27001:2022 certified. This means that we follow best market practices and the highest standards when it comes to keeping your data safe.

If you have any questions or complaints

If you have any questions or if you are not satisfied with the way we handle your personal data, please feel free to fill our  data subject request form here, to send us an e-mail at  privacy@edpo.com or to write to us at 8 Northumberland Avenue, London WC2N 5BY, United Kingdom.  

If you have any complaints about the way EDPO UK processes your personal data, you can file a complaint with the UK Data Protection Authority (ICO):  https://ico.org.uk/make-a-complaint/

G. Transferring your information outside of the United Kingdom

As part of our services, the information that you provide us with may be transferred to countries outside of the UK. By way of example, this may happen for purposes related to your requests to exercise your rights under the UK GDPR with respect to one of our clients, within the context of our role as representative under Article 27 of the UK GDPR. By submitting your personal data for that purpose, you’re agreeing to this transfer and processing. If we transfer your information outside of the UK in this way, we will take necessary steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy.

H. Google Analytics and Google Ads.

The website analytics processing described in this section is carried out by EDPO UK. In connection with our use of Google Analytics 4 and Google Ads, personal data may be processed by or made accessible to Google group entities located outside the European Economic Area, including Google LLC in the United States. For relevant transfers of personal data to Google LLC in the United States, EDPO UK relies on the EU-U.S. Data Privacy Framework where applicable. Where an adequacy framework is unavailable or inapplicable, the applicable Standard Contractual Clauses or other appropriate transfer safeguards may be relied upon. Further information regarding Google’s international data-transfer safeguards is available from Google.

I. Data Retention

We will process your personal data only for the duration strictly necessary to achieve the purposes listed in the “Purposes and legal basis of the processing” section. After fulfilling such purposes, your data will be deleted, except for specific cases where we may be legally required to store it for longer periods. Further information regarding the period of retention of personal data and the criteria used to determine this period may be required by writing to us using the contact details provided in this Policy.

Review of this Policy

We keep this Policy under regular review. This Policy was last updated on 23 December 2025. We reserve ourselves the right to amend or update the content of the Policy, whether in part or in its entirety, also considering any changes in applicable law. We therefore invite you to visit this section of the website regularly to stay informed of the most recent and updated version of the Policy.