Privacy Policy

1. Who we are

Operon Delivery Ltd ("Operon", "we", "us", "our") is a private limited company registered in England and Wales. Company number: 16990830. Registered address: 14 Highmeadow, Upholland, WN8 0BE.

We are the data controller for personal data collected through this website and through our business operations.

2. What data we collect

We collect the following categories of personal data:

Through our contact form

• Your name
• Your work email address
• Your organisation name
• Your role or job title
• Information you provide about your situation or programme

Through website usage

• Basic analytics data such as pages visited and time on site, if analytics tools are enabled
• Technical data such as browser type and IP address, collected automatically by our hosting provider

Through business relationships

• Contact details of client and prospect representatives
• Business information shared during the course of engagements

3. How we use your data

We use personal data for the following purposes:

• Responding to enquiries submitted through our contact form
• Assessing whether and how Operon can help with your situation
• Managing ongoing client engagements and communications
• Complying with legal and contractual obligations

We do not use your data for marketing purposes without your explicit consent. We do not sell your data to third parties. We do not use your data to train AI models.

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Legitimate interests — to respond to business enquiries and manage client relationships
• Contract performance — where processing is necessary to fulfil our contractual obligations
• Legal obligation — where we are required to process data by law
• Consent — where you have explicitly provided consent, for example for marketing communications

5. How long we keep your data

• Enquiry data from contact forms: up to 12 months if no engagement follows
• Client engagement data: for the duration of the engagement plus 6 years (standard UK commercial retention)
• Financial records: 6 years as required by HMRC

We review retained data annually and delete it when it is no longer needed.

6. Who we share your data with

We do not sell or rent your personal data. We may share data with:

• Our hosting and form processing provider (Netlify) — for the purpose of operating this website. Netlify is based in the United States. Data transferred to Netlify is protected under standard contractual clauses approved for use under UK GDPR
• Our accounting software provider — for invoicing and financial records
• Professional advisors — such as legal or accountancy firms, under confidentiality obligations
• Regulatory bodies or law enforcement — where we are legally required to do so

All third-party providers are selected carefully and are required to handle data securely and in accordance with applicable data protection law.

6a. International transfers

Some of our third-party service providers are based outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements. Netlify, our hosting and form processing provider, is based in the United States and processes data under standard contractual clauses approved for use under UK GDPR. No other international transfers of your personal data take place in connection with this website.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data where there is no legitimate reason for us to retain it
• Object to processing based on legitimate interests
• Request restriction of processing in certain circumstances
• Data portability — receive your data in a commonly used format
• Withdraw consent at any time, where consent is the legal basis for processing

To exercise any of these rights, please use our contact form. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have handled your data unlawfully.

8. Cookies

This website uses only essential cookies required for basic site functionality. No tracking cookies, analytics cookies, or third party cookies are set. No cookie consent banner is required. If this changes, we will update this policy and add a cookie consent mechanism before doing so.

9. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Our website is served over HTTPS. Form submissions are processed by Netlify, which maintains its own security standards and certifications.

No method of transmission over the internet is completely secure. If you have concerns about sharing sensitive information, please use our contact form and describe your concern.

10. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last updated. We recommend checking this page periodically if you have an ongoing relationship with us.

11. Contact

For any questions about this Privacy Policy or how we handle your personal data: