Privacy Policy

Introduction

Evobytes Consulting Ltd ("we," "us," "our") is committed to protecting and respecting the privacy of our business clients. This Privacy Policy outlines how we handle data collected, processed, and shared during the provision of our consulting services. By engaging our services, you agree to the terms outlined in this policy.

Scope of the Policy

This policy applies to all business clients and data we collect, process, or access while performing consulting services, including accessing client-provided systems such as Salesforce, Stripe, or other platforms. Any additional terms or agreements, such as Non-Disclosure Agreements (NDAs), will supplement this policy and provide further assurances regarding confidentiality.

1. Data Collection

We may collect and process the following types of data:

• Client-Provided Data: Names, contact information, roles of client personnel, and business-related data explicitly provided for consulting purposes.
• System Access Data: Information accessed through client-provided platforms, including Salesforce, Stripe, or similar systems.
• Communication Data: Records of communications, such as emails, meetings, and project updates.

2. Purpose of Data Usage

We use the data collected solely for:

• Delivering consulting services as agreed upon with the client.
• Accessing and working within client systems to implement or improve workflows.
• Analyzing and resolving issues related to the services provided.

Under no circumstances will your data be used for purposes unrelated to the contracted services.

3. Data Security and Confidentiality

3.1 Non-Disclosure Agreement (NDA):

We understand the sensitive nature of your business data. We will enter into a legally binding NDA upon request to ensure the confidentiality of all shared information.

3.2 Access Management:

• Use only secure, client-authorized methods to access your systems.
• Limit access to only those systems and data necessary for service delivery.
• Maintain and periodically update strong authentication methods to protect against unauthorized access.

3.3 Data Protection Measures:

• Data is processed and stored on secure devices and platforms compliant with applicable UK data protection laws (e.g., GDPR).
• Encryption and secure storage methods are used for any locally stored client data.
• Highly sensitive information, such as access credentials, should be exchanged via end-to-end encrypted messaging platforms like WhatsApp unless the client prefers an alternative secure method.

3.4 Data Retention:

Data will be retained only as long as necessary to fulfill the purpose of the service or as required by law. Upon project completion, any client data in our possession will be securely deleted unless otherwise agreed.

4. Sharing and Disclosure

We will not share or disclose your data to third parties without your explicit consent unless required by law or regulatory obligations.

5. Client Responsibilities

Clients are responsible for:

• Providing accurate and up-to-date data necessary for the services.
• Ensuring appropriate access rights are granted for systems used in consulting engagements.
• Informing us of any changes to data protection or confidentiality requirements specific to their organization.
• Exchanging highly sensitive information, such as access credentials, using secure methods as mutually agreed.

6. Rights Under GDPR

As a business operating in the UK, we comply with the General Data Protection Regulation (GDPR). While GDPR primarily governs personal data, we extend the same level of care to your business data. Clients have the following rights:

• Access: To request access to data we hold.
• Correction: To request corrections to inaccurate or incomplete data.
• Deletion: To request deletion of data no longer required.
• Restrictions: To restrict certain processing activities.

To exercise these rights, please contact us at [Your Contact Email].

7. Updates to the Privacy Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. A notification of any significant updates will be sent to the primary contact email provided by each client.

8. Contact Information

If you have any questions or concerns about this policy or our data practices, please contact:

Evobytes Consulting Ltd
5 Tiverton Way, Frimley, Surrey, GU16 8XB
[email protected]
+44 7703 54 66 92

Effective Date: January 2025