Privacy notice

1. Controller

QeNo Ltd.
Bridgewater Place, Water Lane, Leeds LS11 5QR, United Kingdom
Registered office and postal address:
27 Old Gloucester Street, London WC1N 3AX, United Kingdom
Company No. 1356 8592
Email: info@qeno.uk

2. Hosting and data processed when you visit this website

This website runs on servers operated by QeNo Ltd. Requests to the website are routed through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which protects the site against attacks and acts as our processor. When the website is accessed, our servers and Cloudflare process technical data transmitted by your browser. This typically includes the IP address, the date and time of the request, the page requested, the HTTP status code, the volume of data transferred, the referring page and the browser and operating system identifiers.

• Purpose: delivering the website, maintaining stability and security, and detecting and investigating misuse.
• Legal basis: Article 6(1)(f) UK GDPR — legitimate interests in operating a secure and functioning website.
• Retention: server log data is retained only as long as necessary for these purposes and is then deleted or anonymised.

3. Cookies

This website does not set cookies for analytics, advertising or profiling, and does not embed third-party tracking. If cookies strictly necessary for the operation of the site are introduced in future, they will be described here; any non-essential cookies would be set only with prior consent under the Privacy and Electronic Communications Regulations.

4. Web fonts

All typefaces are served from this website's own domain. No connection to Google Fonts or any other font service is made when you visit the site.

5. Enquiries by contact form or email

If you submit the contact form or write to us, we process the data you provide — typically name, organisation, email address and the content of your message — in order to respond and, where relevant, to prepare or perform a contract.

• Legal basis: Article 6(1)(b) UK GDPR where the enquiry relates to a contract or pre-contractual steps; otherwise Article 6(1)(f) UK GDPR — legitimate interest in responding to business correspondence.
• Retention: enquiries are retained for as long as needed to deal with the matter, and thereafter for the periods required by commercial and tax law. Correspondence with no further relevance is deleted.
• Consent record: the email generated by the contact form records that consent was given and the time of submission, so that the lawful basis for holding the enquiry can be demonstrated.
• Transmission: enquiries submitted through the form are processed on our web server and sent as an email over an encrypted, authenticated connection to a mail server operated by QeNo Ltd. No third-party form or email service is involved.

6. Recipients and processors

Personal data is disclosed only where necessary. Recipients may include the providers of our hosting, email and IT infrastructure, acting as processors under written agreements meeting the requirements of Article 28 UK GDPR, and professional advisers or public authorities where there is a legal obligation to disclose. Personal data is not sold and is not used for advertising purposes.

7. International transfers

Because Cloudflare operates a global network and is established in the United States, technical request data processed when the website is accessed may be transferred outside the United Kingdom and the European Economic Area. Such transfers are made on the basis of the EU-U.S. Data Privacy Framework and its UK Extension, where the recipient is certified under it, and otherwise on the basis of the Standard Contractual Clauses of the European Commission or the UK International Data Transfer Addendum, together with any supplementary measures required. Further information is available in Cloudflare's privacy policy at cloudflare.com/privacypolicy.

8. Security

This website is delivered over an encrypted TLS connection. QeNo Ltd applies technical and organisational measures appropriate to the risk, including access control, segregation of environments, logging and encryption of data at rest where appropriate.

9. Your rights

Subject to the conditions set out in data protection law, you have the right to:

• request access to the personal data we hold about you;
• request rectification of inaccurate or incomplete data;
• request erasure of your data;
• request restriction of processing;
• receive your data in a portable format, or have it transmitted to another controller;
• object to processing carried out on the basis of legitimate interests; and
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Requests should be sent to info@qeno.uk.

10. Complaints

You may lodge a complaint with a supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. If you are in the European Economic Area, you may complain to the supervisory authority of your habitual residence or place of work.

11. Provision of data

Providing personal data is neither required by statute nor by contract. However, without the details marked as required in the contact form we cannot process and answer your enquiry.

12. Automated decision-making

QeNo Ltd does not use the data described in this notice for automated decision-making producing legal effects concerning you, or for profiling.

13. Changes to this notice

This notice is reviewed as our services and legal obligations develop, and the current version is always published on this page.