Privacy Policy | Sosyomax Ltd.

1. Who We Are

Sosyomax Ltd. ("we", "us", or "our") is a company registered in England and Wales under company number 17141685, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

We are the data controller for personal data collected through this website. For questions about how we handle your data, contact us at info@sosyomax.co.uk.

2. Data We Collect

We collect personal data only when you actively provide it or when it is generated by your use of our website:

Contact form submissions: name, email address, company name (optional), and the message content you provide.
Email correspondence: any personal data contained in emails you send to us.
Technical data: IP address, browser type, device type, pages visited, and referring URL — collected automatically via server logs and, where applicable, analytics tools.

We do not collect sensitive personal data (such as health, financial, or biometric information) through this website.

3. Why We Collect It (Legal Bases)

Purpose	Data Used	Legal Basis
Responding to enquiries	Name, email, message	Legitimate interest / pre-contractual steps
Delivering contracted services	Name, email, company details	Performance of a contract
Improving website performance	Technical / analytics data	Legitimate interest
Legal obligations & fraud prevention	All relevant data	Legal obligation

4. How Long We Keep Your Data

We retain personal data only as long as necessary:

Contact enquiries: up to 2 years from the date of last contact, unless a contract arises.
Client project data: for the duration of the project plus 6 years (in line with UK limitation periods for contract claims).
Server logs: up to 90 days, then automatically purged.

5. Who We Share Your Data With

We do not sell, rent, or trade personal data. We may share data with trusted third-party processors where strictly necessary:

Hosting provider: our web server provider processes technical data on our behalf under a data processing agreement.
Email infrastructure: we use server-side PHP mail() for contact form emails. No third-party marketing platforms receive your data.
Legal authorities: we may disclose data if required by law, court order, or to protect our legal rights.

All processors are based in the UK or EEA, or subject to standard contractual clauses approved by the ICO.

6. Your Rights Under UK GDPR

If you are in the UK or EEA, you have the following rights regarding your personal data:

Right of access — request a copy of the data we hold about you.
Right to rectification — ask us to correct inaccurate data.
Right to erasure — request deletion of your data (subject to legal retention obligations).
Right to restrict processing — ask us to pause processing while a dispute is resolved.
Right to data portability — receive your data in a structured, machine-readable format.
Right to object — object to processing based on legitimate interest.

To exercise any right, email info@sosyomax.co.uk. We will respond within 30 days. If you are unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Security

We implement appropriate technical and organisational measures to protect personal data against accidental loss, destruction, alteration, or unauthorised disclosure. These include HTTPS encryption, access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

8. Cookies

This website uses cookies. Please see our Cookie Policy for full details.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the website after an update constitutes acceptance of the revised policy.

10. Contact

For any privacy-related questions or requests:

Email: info@sosyomax.co.uk
Post: Sosyomax Ltd., 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ