Privacy

Privacy notice

Last updated: 14 November 2026

This notice explains how we handle information when you visit our website or contact and work with us. We don't use advertising trackers or visitor analytics.

Who we are

Pavryn Ltd ("Pavryn", "we", "us") is the data controller for the personal information described here. We are registered in England and Wales, company number 17483267, and our registered office is 1 Broughton Close, Taunton, TA1 2JS.

For privacy questions or requests about your information, email data@pavryn.com or write to our registered office.

When you visit this website

Hosting and security. Our website runs on Microsoft Azure in the UK South region. Delivering pages involves processing your IP address and request information, such as the requested page, time and browser details. We use service diagnostics to maintain availability and investigate faults.
Light and dark mode. If you use the light/dark switch, your choice is saved in your browser's local storage so the site remembers it. It never leaves your device, and you can clear it in your browser settings. The preference has no automatic expiry. You can prevent it being saved by blocking local storage in your browser; the site will still work.
Cookies and other services. We don't set cookies or load third-party analytics, advertising, fonts or embedded media. Links to other websites are subject to those websites' privacy notices.

When you contact or work with us

What we collect

Your name, email address, the content of your message, and any other details you choose to include — for example a phone number, job title or the organisation you work for. If we work together, we also keep relevant contract, service and payment records. Your organisation may provide your business contact details so we can work with you.

Why we use it, and our lawful basis

To deliver and secure the website and investigate faults — our legitimate interests in running a reliable service (UK GDPR Article 6(1)(f)).
To respond to enquiries, manage business relationships and deliver work for organisations — our legitimate interests in communicating with business contacts and providing our services (Article 6(1)(f)).
Where a contract is with you personally, to take steps you request before entering it and perform that contract (Article 6(1)(b)).
To keep business and tax records the law requires — our legal obligations (Article 6(1)(c)).

You choose what to include in an enquiry. Without sufficient contact or service information, we may be unable to reply or carry out the work.

Please don't send us sensitive information (such as health details) unless we have asked for it.

Who we share it with

Microsoft — hosts our website through Azure, and provides our business email and document services through Microsoft 365.
Cloudflare — provides our domain name service and routes incoming business email to Microsoft 365.
Professional advisers, such as our accountant, only where needed.
Authorities, only where the law requires it.

Transfers outside the UK

Microsoft and Cloudflare provide their services internationally, and their data protection terms cover processing of your information outside the UK, including in the United States.

Those terms protect these transfers with UK-recognised safeguards: adequacy regulations, or standard contractual clauses with the UK Addendum where required. You can read Microsoft's data protection terms and Cloudflare's data protection terms, or ask us about the safeguards that apply to your information.

How long we keep it

Enquiries that don't lead to work: deleted within 12 months of our last contact.
Client and supplier relationship records: normally kept while we work together and for 6 years after the relationship ends, to manage contractual queries and potential claims.
Accounting records: kept for 6 years from the end of the company financial year they relate to, or longer where tax law requires.
Application and platform logs in our Azure Log Analytics workspace: configured for 30-day retention.
Browser preferences: remain on your device as explained above, with no automatic expiry.
Messages unrelated to our business: deleted promptly.

Where a complaint, dispute or legal requirement means we need particular records for longer, we keep only the information needed for that purpose.

Your rights

You can ask us to:

give you a copy of the information we hold about you;
correct information that is wrong or incomplete;
delete your information;
limit how we use it;
send your information to you or another organisation in a portable format.

Your right to object. You can object to us using your information where we rely on legitimate interests. Email data@pavryn.com and tell us about your circumstances. We will consider your objection and explain our response.

To make a request, email data@pavryn.com. We normally respond free of charge within one month. Where the law permits extra time, we will explain why and tell you when to expect a response. We may need to confirm your identity. Some rights depend on the circumstances — for example, we may need to keep records the law requires — and we will explain any limits that apply.

Complaints

If you have a concern, please tell us and we will try to resolve it. You can also complain directly to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.

Changes to this notice

If we change how we use personal information, we will update this page and the date at the top.