Privacy
This notice covers aspirefox.co.uk only. It describes what the site does and does not collect, and how an enquiry you send us by email is handled. Our AegisOps Offshore application has its own privacy notice and Data Processing Agreement; this notice does not cover it.
Who we are
Aspire Fox Ltd, registered in Scotland (SC807397), registered office 5 South Charlotte Street, Edinburgh EH2 4AN. Registered with the Information Commissioner's Office, registration ZC018119. Contact: thomas@aspirefox.co.uk · +44 (0)7548 774333. Data protection contact: Thomas Fox, Director — thomas@aspirefox.co.uk.
What this site collects
No cookies. No analytics. No contact form. The site does not collect personal data from visitors.
If you email us
The only personal data we hold is what you choose to send by email — typically your name, organisation, contact details and the content of your enquiry. We use it to respond to and follow up your enquiry and, where relevant, to prepare a quotation. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)) — responding to a business enquiry you have initiated; if the enquiry leads to a contract, further processing is necessary for that contract (Article 6(1)(b)). We keep enquiry correspondence for the life of the enquiry and for 12 months after our last contact, then delete it. Enquiries that lead to work become part of the client record and are kept for six years in line with our business-records retention.
Hosting and providers
The site is static and is hosted by Vercel, Inc. (USA) on its edge network, served from UK/EU locations. Vercel may process your IP address transiently in request and security logs in order to deliver the site and protect it from abuse; we do not access or use these logs to identify visitors. Email enquiries are received and stored in Microsoft 365 with UK data residency. Both providers are recorded on our sub-processor and cloud-computing registers and hold independent security certifications (SOC 2 / ISO/IEC 27001). Where any personal data is transferred outside the UK, the transfer is covered by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to our processing, and to data portability where it applies. To exercise any of these rights, email thomas@aspirefox.co.uk. We may ask you to confirm your identity before responding. We respond within one calendar month and make no charge unless a request is manifestly unfounded or excessive. We do not make automated decisions about visitors and do not profile them.
Complaints
You can raise a concern with us first at thomas@aspirefox.co.uk. You also have the right to complain to the Information Commissioner's Office: ico.org.uk · 0303 123 1113.
Security
Personal data we hold is managed under our information security management system, which is aligned to ISO/IEC 27001:2022 and is being assessed for certification alongside our existing ISO 9001, ISO 14001 and ISO 45001 certifications.
Changes to this notice
This notice is a controlled document (WEB-PN-01), reviewed at least annually. The version number and effective date at the top change whenever it is updated.