Last updated: 2 October 2026
Who we are
ESCUDIX LTD ("ESCUDIX", "we", "us") is a private limited company registered in England and Wales, company number 17495267. Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We are the controller of the personal data described in this notice. For any privacy question or request, email privacy@escudix.com.
Who this notice covers
This notice explains how we handle personal data about people who visit escudix.com, contact us, or deal with us as business contacts, such as prospective customers, partners, suppliers and investors. When we process personal data on behalf of a business customer, for example inside software we provide to them, that customer is the controller, and their own privacy notice and our contract with them apply.
What we collect and where it comes from
• Enquiries. When you use our contact form or email us, we receive your name, work email, company, the topic you choose, your message and anything else you decide to send.
• Business contact details. These include your name, job title, employer, work contact details and notes of our conversations. We get them from you, from your colleagues, from business cards and events, and from public professional sources such as company websites and LinkedIn profiles.
• Technical data. When you visit our website, our hosting provider Cloudflare processes your IP address, browser and device information and the pages you request, so that the site can be delivered and protected from abuse. We also use your IP address briefly to limit repeated contact form submissions.
• Website analytics. Cloudflare Web Analytics counts visits and measures page performance without cookies and without storing anything on your device. Google Analytics uses cookies to collect information about your visit, such as the pages you view, how you arrived, your device and browser and your approximate location. Google Analytics does not store IP addresses. In the UK, the European Economic Area and Switzerland, Google Analytics runs only if you accept analytics cookies. We do not use advertising or advertising trackers.
Why we use it and our lawful basis
• To reply to your enquiry and to talk to you about working together. Our lawful basis is legitimate interests, or taking steps at your request before entering into a contract.
• To build and manage business relationships, including occasional emails about ESCUDIX. Our lawful basis is our legitimate interest in developing our business. You can object or opt out at any time, and we will stop.
• To keep our website and systems secure and prevent misuse. Our lawful basis is legitimate interests.
• To understand how visitors use our website and improve it. For Cloudflare Web Analytics, our lawful basis is legitimate interests. For Google Analytics, it is your consent in the UK, the European Economic Area and Switzerland. Elsewhere it is our legitimate interests, and you can opt out in Cookie settings.
• To meet our legal, tax and accounting obligations, and to establish or defend legal claims. Our lawful basis is legal obligation and legitimate interests.
We do not sell personal data, and we do not make decisions about you based solely on automated processing.
Who we share it with
We share personal data only as needed with:
• Cloudflare, for website hosting, security, email routing and delivery of contact form messages;
• Google, for Google Analytics, where Google acts as our processor, and for email hosting;
• our professional advisers, such as accountants and lawyers;
• authorities, where the law requires it;
• a buyer or investor, in connection with a sale, merger or financing of our business, under confidentiality obligations.
International transfers
Some of our providers process data outside the UK, including in the United States. Where this happens, we rely on UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework, or on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep it
• Enquiries and business contact records: up to 24 months after our last contact, unless we have an ongoing relationship.
• Contracts, invoices and accounting records: six years after the end of the financial year they relate to.
• Google Analytics data: 14 months.
• Technical logs: kept by Cloudflare for short periods under its own retention policy.
Your rights
You have the right to:
• access your personal data;
• have it corrected;
• have it erased;
• restrict how we use it;
• object to our use of it;
• receive it in a portable format.
Where we rely on consent, you can withdraw it at any time. For analytics, use Cookie settings at the bottom of every page. To use any of these rights, email privacy@escudix.com. We will reply within one month. We may need to confirm your identity first.
Complaints
If you are unhappy with how we handle your data, email privacy@escudix.com with the subject "Data protection complaint". We will acknowledge it within 30 days and let you know the outcome. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes
We will update this notice when our practices change and show the new date at the top.