Privacy Policy

Glentorion Ltd (“Glentorion”, “we”, “us” or “our”) provides regulatory authorisation consultancy and develops supporting software and AI tools. This policy explains how we handle personal data when you visit our website, contact us or use our services.

We collect information that you provide to us, information created through your use of our services and limited technical information generated when you use our website.

• Identity and contact details, including your name, organisation, role, email address and telephone number.
• Account, enquiry and correspondence information, including messages, service enquiries, introductory conversations and support communications.
• Service data supplied by customers or their authorised users, including documents and workflow records.
• Technical and usage information, such as IP address, browser type, device information and interaction data.

We use personal data only where we have a lawful basis to do so. Depending on the context, this may be to perform a contract, pursue our legitimate interests, comply with a legal obligation or act with your consent.

• To provide, secure, maintain and improve our website and services.
• To respond to service enquiries, arrange introductory conversations and manage customer relationships.
• To administer accounts, authenticate users and provide support.
• To prevent misuse, investigate incidents and meet legal or regulatory requirements.
• To send relevant service or marketing communications where permitted by law.

We may use essential cookies required for the website to function and limited analytics or preference technologies where permitted. You can control non-essential cookies through any consent controls we provide and through your browser settings.

We may share personal data with vetted service providers who support hosting, security, communications, analytics and professional services. We may also disclose information where required by law, to protect rights or safety, or in connection with a corporate transaction. We do not sell personal data.

Where personal data is transferred outside the United Kingdom, we use appropriate safeguards required by data protection law, such as adequacy regulations or approved contractual protections.

We use proportionate technical and organisational measures designed to protect personal data. We keep information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements.

Depending on the circumstances, UK data protection law may give you rights to:

• Access a copy of your personal data.
• Ask us to correct, delete or restrict the use of your data.
• Object to certain processing or withdraw consent where processing relies on consent.
• Receive certain data in a portable format.
• Complain to the UK Information Commissioner’s Office or another competent regulator.

You can opt out of marketing communications at any time using the unsubscribe option provided or by contacting us. Our website may link to third-party services governed by their own privacy policies. Our services are intended for organisations and are not directed to children.

We may update this policy as our services or legal obligations change. The latest version will be published on this page.

For privacy questions or to exercise your rights, email us at contact@glentorion.com.