// Legal

Privacy Policy

Last updated: 28 April 2026

1. Introduction

This policy explains how Ereyna Labs Ltd collects, uses and protects personal information in connection with the website at ereynalabs.com (the “Site”) and any related correspondence or services. We’ve tried to keep it plain English. If anything is unclear, email support@ereynalabs.com and we’ll explain.

2. Who we are

For the purposes of UK data protection law, the data controller is:

Ereyna Labs Ltd
Registered in England and Wales, Company No. 14603041
3 Aldonvale, Middle Street, Shepton Beauchamp, United Kingdom, TA19 0LB
support@ereynalabs.com · +44 7946 243497

We don’t currently appoint a Data Protection Officer (we’re below the legal threshold), but the registered email above reaches the person responsible for data-protection matters.

3. What information we collect

We only collect what we need. In practice, that’s:

  • Information you give us directly when you contact us by email, phone or through any form on the Site. Typically your name, email address, phone number, the company you work for, and the contents of your message.
  • Information collected automatically when you visit the Site: standard server log data such as IP address, browser type and version, operating system, the pages you visit and the time of your visit. We use this to operate the Site and detect abuse.
  • Information from cookies and similar technologies as described in section 9 below.

We don’t collect special-category personal data (health, race, religion, etc.) and we don’t intentionally collect data from children under 16. If you believe a minor has submitted information through the Site, contact us and we’ll delete it.

4. How we use your information

We use the information we collect to:

  • respond to your enquiry and, where appropriate, scope and deliver an engineering project;
  • send you written proposals, contracts, project updates and invoices if we’re engaged to do work for you;
  • send occasional follow-up communications relating to a live or recent enquiry;
  • operate, secure and improve the Site;
  • comply with our legal and regulatory obligations.

We do not sell personal information to third parties, and we do not use your data to train third-party AI models.

5. Lawful bases for processing

Under the UK GDPR, we rely on the following lawful bases:

  • Consent: where you’ve specifically agreed to a use, for example signing up to a mailing list. You can withdraw consent at any time by emailing us.
  • Contract: where processing is necessary to provide a service you’ve asked us to deliver, or to take steps before entering into a contract with you (responding to a project enquiry, drafting a proposal, etc.).
  • Legitimate interests: for limited purposes such as keeping the Site operational and secure, replying to a clearly-business-related enquiry, and basic record-keeping. We’ve assessed these interests against your rights and consider them proportionate.
  • Legal obligation: where we’re required by law or regulation to retain or disclose information.

6. Marketing communications

We don’t run a general marketing list and we don’t send unsolicited cold-marketing email. If you opt in to a specific mailing (for example, a future AgriHub360 launch list), every message will include an unsubscribe link, and you can opt out at any time.

7. Sharing your information

We share personal information only where necessary, and only with parties bound by appropriate confidentiality and data-protection terms. The categories of recipient include:

  • Service providers who help us run the business, such as our email provider, hosting provider and accounting platform. They process data on our behalf under written terms.
  • Professional advisers such as lawyers, accountants and insurers, where required.
  • Authorities where we’re legally required to disclose information (for example, in response to a court order or a regulatory request).

We don’t share your personal information with any third party for their own marketing purposes.

8. Data security

We take reasonable technical and organisational measures to protect personal data, including transport encryption (HTTPS), least-privilege access controls, and limiting the number of people with access to enquiry data. No system is 100% secure. If we ever become aware of a personal-data breach affecting you, we’ll notify you and the ICO as required by law.

9. Cookies

The Site uses a small number of cookies and similar technologies to help it work and to give us basic, anonymised analytics on how it’s used. We don’t use third-party advertising or tracking cookies.

You can disable or delete cookies through your browser settings. Doing so should not break the Site, although a small amount of functionality may be reduced.

10. Data retention

We keep personal data only for as long as necessary for the purpose it was collected for, after which it’s deleted or anonymised. Indicative retention periods:

  • One-off enquiries that don’t lead to a project: up to 24 months.
  • Records relating to active or completed engagements: for the duration of the engagement plus seven years, in line with our accounting and legal obligations.
  • Server log data: typically 30 days.

11. International transfers

Most of our processing takes place in the United Kingdom or the European Economic Area. Some service providers (for example, our email provider) are based outside the UK. Where personal data is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

12. Your rights

Under UK data-protection law you have the following rights, free of charge:

  • Access: a copy of the personal information we hold about you.
  • Rectification: correction of inaccurate or incomplete data.
  • Erasure: deletion of your personal data, where applicable.
  • Restriction: restricting our use of your data while a query about it is resolved.
  • Portability: receiving your data in a structured, machine-readable format, where the processing is automated and based on consent or contract.
  • Objection: objecting to processing based on legitimate interests, including direct marketing.
  • Withdrawal of consent: withdrawing any consent you’ve previously given.

To exercise any of these rights, email support@ereynalabs.com. We may need to verify your identity. We’ll respond within one month, or let you know if we need longer (and why).

13. Complaints

If you’re not happy with how we’ve handled your personal data, please contact us first so we can try to put it right. You also have the right to complain to the UK’s data-protection regulator, the Information Commissioner’s Office (ICO):

ico.org.uk
Helpline: 0303 123 1113

14. Third-party links

The Site contains links to third-party websites, including the AgriHub360 product site at agrihub360.com. Their privacy practices are governed by their own policies. We’re not responsible for them and we encourage you to read those policies before sharing any personal information with the destination site.

15. Changes to this policy

We may update this policy from time to time. The current version is always the one published on this page, with the “Last updated” date shown above. If we make a material change, we’ll flag it at the top of the page and, where appropriate, notify anyone affected.

16. Contact

For any privacy-related question, email support@ereynalabs.com or write to us at the registered office address above.