Privacy notice

1. Who we are

Gryphus Defence Ltd is the data controller for the personal data described here. We are registered in England and Wales, company number 17346847, at 5th Floor, 167–169 Great Portland Street, London W1W 5PF.

For any question about your data, or to exercise any of the rights below, write to info@gryphus.co.uk.

2. What we collect

If you use the enquiry form, we collect the name, organisation, work email address, country, enquiry type and message you enter, together with the date and time of the enquiry.

If you apply for a role, we collect whatever you send us by email, which will normally include your name, contact details, CV and covering note.

Our hosting provider keeps standard server logs, which include IP addresses and browser information. These are generated automatically by the web server and are used for security and reliability.

We do not use analytics, advertising or tracking of any kind. We set no cookies beyond those strictly necessary to serve the page, which is why this site has no cookie banner.

3. Why we collect it, and our lawful basis

Enquiries are handled on the basis of our legitimate interests in responding to approaches about our products and in conducting business correspondence, and on the basis of the consent you give when you tick the box on the form. You may withdraw that consent at any time by writing to us.

Job applications are handled on the basis of taking steps at your request before entering into a contract, and our legitimate interest in assessing candidates.

Server logs are kept on the basis of our legitimate interest in keeping the site secure and available.

4. How long we keep it

Enquiries are kept for 24 months from your last contact with us, then deleted.

Applications from candidates we do not take forward are kept for 12 months, then deleted. If you would rather we deleted yours sooner, say so and we will.

Server logs are kept for the period set by our hosting provider, which is short and typically measured in weeks.

5. Who we share it with

Enquiries submitted through the form are stored in Google Sheets and notified to us by email. Google acts as our processor for that storage and for our email. Our website hosting provider processes the server logs described above.

We do not sell personal data. We do not share it with advertisers or analytics companies, because we do not use any. We may disclose data where we are required to by law.

6. Where it is stored

Data held in Google Sheets and in our email is stored on Google's infrastructure and may be processed outside the United Kingdom, including in the United States. Where personal data is transferred out of the UK, it is protected by the safeguards Google puts in place for that purpose, which include the UK International Data Transfer Addendum to the European Commission's standard contractual clauses.

7. Your rights

Under UK data protection law you have the right to ask us for a copy of the personal data we hold about you, to have inaccurate data corrected, to have your data deleted, to restrict or object to how we use it, and in some cases to receive it in a portable form. Where we rely on consent, you can withdraw it at any time.

To exercise any of these, write to info@gryphus.co.uk. We will respond within one month. We will not charge you, and we will not treat you differently for asking.

8. How to complain

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk, or by calling their helpline on 0303 123 1113.

9. Changes to this notice

If we change how we handle personal data, we will update this page and the date at the top of it.