legal/Privacy Policy

1. Who We Are

Gridisys Ltd ("Gridisys", "we", "us", "our") is a company registered in England and Wales (Company No. 15780405), with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX.

We are the data controller for personal data collected through our website at gridisys.com and through the provision of our services.

Contact: hello@gridisys.com

2. What Data We Collect

We may collect and process the following personal data:

Contact information: name, email address, company name, phone number (when you submit a contact form or book a demo).
Usage data: IP address, browser type, pages visited, time on site (collected via cookies and analytics tools).
Service data: information necessary to deliver our managed SOC and development services, including user account identifiers from Microsoft Entra or Google Workspace (only as agreed under a service contract).
Communications: content of emails, chat messages, or support tickets you send us.

3. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

Contract: to provide services you have engaged us for.
Legitimate interests: to respond to enquiries, improve our services, and for security monitoring purposes.
Consent: for marketing communications and non-essential cookies (where consent is obtained).
Legal obligation: where we are required to process data to comply with applicable law.

4. How We Use Your Data

To respond to your enquiries and provide our services.
To deliver and maintain our managed SOC and app development services.
To send service-related communications and, with your consent, marketing updates.
To improve our website and services through analytics.
To comply with legal and regulatory obligations.

5. Data Sharing

We do not sell your personal data. We may share it with:

Service providers: cloud hosting, CRM, email delivery, and analytics vendors, under data processing agreements.
Legal authorities: where required by law or to protect our legal rights.
Business transfers: in the event of a merger, acquisition, or sale of assets.

6. International Transfers

Some of our service providers may be based outside the UK or EEA. Where this is the case, we ensure appropriate safeguards are in place (such as UK Standard Contractual Clauses or adequacy decisions) before transferring personal data.

7. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law. Contact form submissions are typically retained for up to 2 years. Service-related data is retained for the duration of the contract plus 7 years for compliance purposes.

8. Your Rights

Under UK GDPR, you have the following rights:

Right to access your personal data.
Right to rectification of inaccurate data.
Right to erasure ("right to be forgotten").
Right to restrict processing.
Right to data portability.
Right to object to processing based on legitimate interests.
Right to withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at hello@gridisys.com. We will respond within one month.

9. Cookies

We use cookies and similar technologies on our website. Please see our Cookie Policy for full details.

10. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or by calling 0303 123 1113. We would however appreciate the opportunity to address your concerns first — please contact us at hello@gridisys.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page. Material changes will be communicated via email to active clients.