1. Who we are
This privacy policy applies to the AESOP Answers website at aesop-answers.com and the report services provided through it.
The data controller is Integrity Defence Solutions UK Ltd, a company registered in England and Wales under company number 15987740, with its registered office at Knoll House, Knoll Road, Camberley, Surrey, GU15 3SY, United Kingdom.
We are registered with the Information Commissioner's Office (ICO) under registration number ZB914735.
If you have any questions about this policy or how we handle your data, please contact us, selecting Contact DPO from the dropdown box
.2. What data we collect and why
We collect only the data we need to provide the report service and comply with our legal obligations.
|
Data |
Purpose |
Lawful basis |
|
Name & email address |
To identify you, communicate with you (including marketing our services) and deliver your report |
Contract performance (Art 6(1)(b)) |
|
Company name & address |
To verify requests come from genuine organisations, market our services and to ensure compliance with UK and local tax legislation |
Contract performance (Art 6(1)(b)) |
|
VAT number, local tax ID & company registration number |
To verify requests come from genuine organisations and to ensure compliance with UK and local tax legislation |
Contract performance (Art 6(1)(b)) |
|
LinkedIn URL |
To verify requests come from genuine individuals & organisations |
Contract performance (Art 6(1)(b)) |
|
Your question and context |
To produce your report |
Contract performance (Art 6(1)(b)) |
|
Documents you share (Tailored tier) |
To incorporate your data into the report |
Contract performance (Art 6(1)(b)) |
|
Payment data (via Stripe) |
To take payment for your report |
Contract performance (Art 6(1)(b)) |
|
Contact form submissions |
To respond to your enquiry |
Contract performance (Art 6(1)(b)) |
3. International data transfers
The AESOP analytical platform used to produce your report is operated by Integrity Defence Solutions Inc. ("IDS Inc"), our parent company, on Amazon Web Services infrastructure hosted in the United States. However, the preparation of your report does not require any of your personal information to be transferred outside the UK and therefore the information transferred to the United States is not considered to be a “restricted transfer” under UK GDPR.
Payment data is processed by Stripe Inc. in accordance with Stripe's own privacy policy and data transfer safeguards.
4. Who we share your data with
We do not sell your personal data. We do not share it with third parties for marketing. We share data only in the following limited circumstances:
• Stripe Inc. — our payment processor, acting as a data processor under its own terms. Stripe handles your payment card data; we never see or store your full card details.
• Our analysts and staff — who need access to your submission in order to produce your report.
• Legal obligation — if we are required to disclose data by law, court order, or regulatory requirement.
5. How long we keep your data
• Report submissions and completed reports: retained for 5 years from the date of delivery, then securely deleted.
• Payment records: retained for 7 years to comply with HMRC requirements.
• Contact enquiries: retained for 3 years from the date of the enquiry, then deleted.
6. Anonymised reports
If you choose the Public tier, we will publish an anonymised version of your report on our website one week after delivery to you. Before publication, we remove your name, company name and any information that could — by reverse engineering — identify you or your organisation. The sector analysis and general recommendations are not removed.
If you have concerns about the anonymisation of your report, please contact us before the one-week window closes.
7. Your rights under UK GDPR
You have the following rights regarding your personal data. To exercise any of them, contact us, selecting Contact DPO from the dropdown box
.. We will respond within one calendar month.• Right of access: to receive a copy of the personal data we hold about you.
• Right to rectification: to have inaccurate data corrected.
• Right to restrict processing: to limit how we use your data in certain circumstances.
• Right to object: to object to processing based on legitimate interests.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
8. Cookies
We use only strictly necessary cookies on this website. We do not use analytics, advertising, or tracking cookies. For more detail, see our Cookie Policy.
9. Changes to this policy
We may update this policy from time to time. When we do, we will update the effective date and the version number above.
10. Contact
For any questions about this privacy policy or your personal data, contact us, selecting Contact DPO from the dropdown box