Privacy Policy

Last updated: August 2026

This policy explains, in plain English, how Erryn.io Ltd collects, uses, stores, and protects personal data.

It applies when you visit erryn.io, contact us, make an enquiry, become a client, join an early access or product notification list, or use a software service provided by Erryn.io Ltd where we are responsible for deciding how your personal data is used.

Where we process personal data on behalf of a business customer through one of our software services, that business will normally be the controller and Erryn.io Ltd will act as its processor. That processing is governed by the applicable Software Subscription Terms and Data Processing Schedule.

1. Who we are

Erryn.io Ltd is a company registered in England and Wales under company number 17407419.

Registered office:
The Old Granary
Hampton-on-the-Hill
Warwick
United Kingdom
CV35 8HB

For the personal data covered by this policy, Erryn.io Ltd is generally the data controller.

Contact: hello@erryn.io

2. What personal data we collect and why

2.1 Enquiries and contact forms

When you contact us or submit an enquiry, we may collect your name, email address, telephone number, company or organisation, and the information contained in your message.

We use this information to respond to your enquiry, discuss the services you are interested in, provide requested information, and where appropriate take steps towards entering into an engagement with you.

Submitting an enquiry does not add you to a general marketing list.

Legal basis: Legitimate interests in responding to enquiries and operating our business, and where relevant taking steps at your request before entering into a contract.

2.2 Clients and business contacts

If you become a client, prospective client, supplier, partner, or other business contact, we may process information including:

Your name, role, company, and business contact details.
Proposal, contract, statement of work, and project information.
Business correspondence and meeting records.
Invoice, transaction, and payment information.
Technical information reasonably required to provide our services.

We use this information to manage our relationship with you, provide services, communicate about work, administer contracts and payments, maintain business records, and comply with legal and accounting obligations.

Legal basis: Performance of a contract or taking steps before entering into one; legitimate interests in managing our business and client relationships; and legal obligations relating to accounting, taxation, and other statutory requirements.

2.3 Product early access and launch notifications

From time to time we may offer early access, beta registration, waitlists, or launch notifications for software products such as LucroForge.

If you register, we may collect your name, email address, organisation, and information you choose to provide about your business or intended use of the product.

We use this information to administer the relevant programme, assess interest, invite selected participants where applicable, and send the product or launch updates you requested.

Legal basis: Consent where you have asked to receive product or launch communications. You may withdraw that consent at any time.

2.4 Software accounts and subscriptions

Where you create an account for, trial, or subscribe to a software service provided by Erryn.io Ltd, we may collect account and administrative information such as:

Your name and business email address.
Your organisation and account details.
Your selected Plan and subscription status.
Billing and transaction information.
Login, security, and technical event information.
Usage information required to operate, secure, support, or administer the Service.
Support messages and other communications relating to your account.

We use this information to provide and administer the Service, authenticate users, manage subscriptions and billing, provide support, prevent abuse, maintain security, and comply with our contractual and legal obligations.

Legal basis: Performance of our contract with the Subscriber; legitimate interests in operating, improving, protecting, and supporting our Services; and legal obligations where applicable.

Where payment is processed through an external payment processor, payment card information is normally provided directly to that processor. Erryn.io Ltd does not normally receive or store complete payment card details.

2.5 Data processed for software Subscribers

A Subscriber may upload, connect, or otherwise make data available to one of our software Services. That data may include personal data relating to the Subscriber’s customers, employees, prospects, website users, or other individuals.

Where Erryn.io Ltd processes that personal data only on the Subscriber’s instructions in order to provide the Service, the Subscriber is normally the controller and Erryn.io Ltd acts as processor.

The processing of that data is governed by the Data Processing Schedule forming part of our Software Subscription Terms, or by another Data Processing Agreement entered into with the Subscriber.

If you are an individual whose data has been placed into one of our Services by one of our Subscribers, you should normally direct privacy requests to the organisation that collected your information. We will provide reasonable assistance to that organisation where required.

2.6 Website analytics

We use Google Analytics 4 (GA4) to understand how visitors use erryn.io. GA4 is deployed through our website infrastructure and Cloudflare’s server-side tooling.

Analytics information may include pages viewed, approximate geographic region, device and browser information, referral source, interactions with the website, session information, and online identifiers used by the analytics service.

Google states that Google Analytics does not log or store individual IP addresses for users in the UK. IP information may be used temporarily to derive coarse geographic information before being discarded.

We use analytics to understand website usage, identify problems, assess which content is useful, and improve the website.

Legal basis: Consent where non-essential storage or access technologies are used for analytics.

Analytics will not intentionally be used for advertising profiling through this website unless this policy and our cookie information are updated accordingly and any required consent is obtained.

2.7 Technical and security logs

Our website, hosting infrastructure, security systems, and software Services may automatically record technical information such as IP addresses, request timestamps, browser information, authentication events, error information, and security events.

We use this information to operate and secure our systems, diagnose faults, prevent abuse, investigate security events, and protect our Services and users.

Legal basis: Legitimate interests in maintaining the security, reliability, and integrity of our systems and Services.

3. Cookies and similar technologies

erryn.io uses cookies and similar technologies for essential website functionality and, where permitted, website analytics.

Strictly necessary technologies may operate without consent where they are required to provide functionality you request, maintain security, or remember privacy choices.

Where we use non-essential analytics or similar technologies that require consent, they will not be activated until you have made the appropriate choice.

Category	Purpose	Consent
Strictly necessary	Site functionality, security, and privacy preferences	Not normally required
Analytics	Understanding and improving use of the website	Required where applicable

You can change or withdraw a previous cookie choice using the Cookie Settings control provided on the website.

More detailed information about individual cookies and similar technologies, including their providers and duration, is provided in our Cookie Policy.

4. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including where longer retention is required for legal, accounting, security, or contractual reasons.

Data	Typical retention
General enquiries that do not become an engagement	Normally 12 months from the last substantive contact
Early access and product notification registrations	Until the relevant launch or programme ends, or normally no longer than 24 months without further engagement, unless consent is withdrawn earlier
Client and contractual records	For the duration of the relationship and normally up to 6 years afterwards where reasonably required for contractual, legal, or record-keeping purposes
Accounting, invoices, and transaction records	Normally 6 years from the end of the relevant company financial year, or longer where required by law
Software account information	For the duration of the Subscription and afterwards for as long as reasonably required for account, contractual, security, or legal records
Subscriber Data processed on behalf of a software customer	As described in the applicable Software Subscription Terms, Data Processing Schedule, or separate Data Processing Agreement
GA4 user and event-level analytics information	Up to 14 months according to the configured analytics retention period; aggregated statistics may be retained for longer where they no longer identify an individual
Security and technical logs	For as long as reasonably necessary for security, troubleshooting, abuse prevention, or investigation, having regard to the nature of the relevant system

We may retain information for longer where there is an ongoing dispute, security investigation, legal requirement, regulatory enquiry, or other legitimate reason requiring continued retention.

We do not sell personal data and we do not provide personal data to unrelated third parties for their own marketing purposes.

We use third-party service providers where reasonably necessary to operate our website, business, and software Services. Depending on the service you use, these may include:

Cloudflare – website delivery, CDN, WAF, security, and supporting web infrastructure.
Google – website analytics through Google Analytics 4.
Brevo – transactional email and website form delivery where used.
Stripe – payment processing where a paid software Service uses Stripe for subscription or transaction billing.
Hosting, infrastructure, communications, and software providers – where required to host, operate, secure, administer, or support our business and Services.
Professional advisers – such as accountants, insurers, legal advisers, and other professional advisers where reasonably necessary.
Public authorities and regulators – where disclosure is required by law or reasonably necessary to establish, exercise, or defend legal rights.

Software Services may use additional sub-processors depending on their functionality. Information about material sub-processors used to process Subscriber personal data will be made available through the relevant Service or on reasonable request.

6. International transfers

Some of our service providers operate internationally, which means personal data may be processed outside the United Kingdom.

Where a restricted international transfer takes place, we require an appropriate legal basis or safeguard for that transfer as required by applicable UK data protection law. Depending on the destination and provider, this may include UK adequacy regulations or approved contractual transfer safeguards.

You can contact us at hello@erryn.io if you would like further information about the safeguards applicable to a particular transfer.

7. Your data protection rights

Depending on the circumstances and the legal basis on which we process your information, you may have the right to:

Ask whether we process your personal data and obtain a copy of it.
Ask us to correct inaccurate or incomplete personal data.
Ask us to delete personal data where the right to erasure applies.
Ask us to restrict processing in certain circumstances.
Object to certain processing based on legitimate interests.
Receive certain personal data in a portable form where the right to data portability applies.
Withdraw consent at any time where we rely on consent.
Raise a complaint about the way we handle your personal data.

These rights are not absolute and their application depends on the circumstances and applicable law.

To exercise a right, email hello@erryn.io. We may need to verify your identity before disclosing or changing personal data.

We will respond without undue delay and normally within one calendar month. Where permitted by law, that period may be extended for complex requests or where multiple requests have been made. If an extension is necessary, we will tell you within the initial response period.

Your right to object

Where we rely on legitimate interests to process your personal data, you may object to that processing. We will stop the relevant processing unless we have compelling legitimate grounds to continue or the processing is required for the establishment, exercise, or defence of legal claims.

If personal data is ever used for direct marketing, you may object to that use at any time and we will stop using your personal data for that purpose.

8. Data protection complaints

If you believe we have handled your personal data incorrectly, you can raise a data protection complaint by emailing hello@erryn.io.

Please include enough information for us to understand what has happened and what you would like us to investigate.

We will acknowledge a data protection complaint within 30 days, investigate it appropriately, keep you informed where necessary, and provide an outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator. In most circumstances it is useful to give us an opportunity to resolve your concern first.

9. Automated decision-making

Erryn.io Ltd does not currently use personal data for its own purposes to make solely automated decisions about individuals that produce legal or similarly significant effects.

Some software Services may include automated analysis, recommendations, classification, or AI-assisted functionality. Where such functionality processes personal data on behalf of a Subscriber, the Subscriber is responsible for determining how it uses those Outputs and for meeting its own applicable data protection obligations.

10. Data security

We use technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction.

Depending on the system involved, measures may include TLS encryption, web application firewall protection, access controls, authentication controls, hardened infrastructure, logging, monitoring, updates, backups, and other security measures appropriate to the risk.

No internet-connected system can be guaranteed to be completely secure. We therefore regularly review security measures and respond to identified risks as appropriate.

11. Children

Our consultancy and software Services are intended for businesses and are not directed at children. We do not knowingly seek to collect personal data from children through general enquiries, product registration, or subscription processes.

12. Changes to this policy

We may update this policy when our Services, suppliers, technology, or legal obligations change.

When we make a material change to how personal data is handled, we will update this page and revise the date at the top. Where appropriate, we will provide additional notice to affected individuals.

We will not retrospectively rely on a new legal basis for incompatible processing of personal data already collected without considering the requirements of applicable data protection law.

Contact

Erryn.io Ltd
Registered in England and Wales
Company No. 17407419
The Old Granary
Hampton-on-the-Hill
Warwick
United Kingdom
CV35 8HB

Email: hello@erryn.io