Privacy notice

Who we are

Demetra Labs is a trading name of Demetra Group Services Ltd, a company registered in England and Wales. For the personal information described in this notice, Demetra Group Services Ltd is the data controller.

You can contact us about privacy or data protection at [email protected].

Information we may collect

We keep the information we collect proportionate to the relationship we have with you. This may include your name, work contact details, organisation, the contents of messages you send us, meeting or engagement details, and information needed to provide or discuss advisory services.

Like most web services, our hosting infrastructure may also create technical logs containing information such as IP address, browser or device information, requested pages, timestamps and security events. These logs are used to operate, secure and troubleshoot the website.

Why we use personal information

We may use personal information to respond to enquiries, discuss potential work, provide agreed services, manage our business relationship, maintain appropriate business records, protect the website and our systems, and comply with legal or regulatory obligations.

Depending on the circumstances, our lawful basis will normally be taking steps at your request before entering into a contract, performing a contract, complying with a legal obligation, or our legitimate interests in operating and protecting the business and responding to genuine business enquiries.

Who we share information with

We do not sell personal information. We may use trusted service providers where necessary to operate the business, such as website hosting, email, communications, professional advisers and business administration services. They may process information on our behalf or, in some cases, act as independent controllers for their own services.

We may also disclose information where required by law, to protect legal rights or security, or in connection with a corporate transaction.

International transfers

Some technology providers may process information outside the United Kingdom. Where UK data protection law requires safeguards for an international transfer, we will rely on an appropriate mechanism or other lawful basis for that transfer.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to manage enquiries and engagements, maintain appropriate business and financial records, resolve disputes, and meet legal, tax, accounting or security requirements. Retention periods therefore vary according to the type of information and our relationship with you.

Enquiries that do not lead to an engagement will be reviewed periodically and deleted when there is no longer a reasonable business or legal reason to retain them.

Cookies, analytics and external content

The Demetra Labs website is designed to work without advertising or behavioural tracking. This release does not intentionally set non-essential analytics or advertising cookies.

If we introduce non-essential cookies or tracking technologies in future, we will update this notice and provide the information and choices required by applicable law before using them.

Your data protection rights

Depending on the circumstances, UK data protection law may give you rights to ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing, portability, or to object to certain processing. Where processing relies on consent, you may withdraw that consent.

These rights are not absolute and exemptions can apply. To exercise a right, contact [email protected]. We may need to verify your identity before acting on a request.

Complaints

If you have a concern about how we use your personal information, please contact us first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

Information Commissioner's Office: make a complaint

Security

We use proportionate technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse or disclosure. No internet or email system can be guaranteed to be completely secure, so please avoid sending information that is not necessary for the initial enquiry.

Changes to this notice

We may update this notice when our services, suppliers or legal obligations change. The current version will always be published on this page with its last-updated date.