Privacy Policy
What we hold, and why.
Last updated 27 August 2026
Oryx Black Edition Limited is the data controller for the personal data described here. We are registered in England and Wales, company number 14244856.
This policy covers this website and the enquiries made through it. It does not attempt to describe every arrangement we may make on a client’s behalf; where an engagement involves more, it is set out in the engagement terms.
01 What we collect
From the introduction form: your name, your email address, and — only if you choose to give them — your organisation and who introduced you, together with whatever you write in the message field.
From members and staff accounts: an email address and authentication credentials held by our identity provider. We never see or store your password.
From our servers: standard technical records such as IP address, user agent and timestamps, generated automatically when a page or form is requested.
02 Why we hold it, and on what basis
We do not profile you, we do not make automated decisions about you, and we do not use your details for advertising.
- To answer an introduction request and decide whether we can act — our legitimate interest in responding to someone who has approached us.
- To provide and secure account access — performance of our contract with you.
- To keep our systems secure and prevent abuse of the form — our legitimate interest in protecting the service.
- To meet accounting, tax and other legal obligations — compliance with a legal obligation.
03 Who else sees it
We do not sell personal data and we do not share it for anyone else’s marketing.
We use a small number of service providers who process data on our instructions: Google (identity, database, file storage and hosting for this site) and our email delivery provider, which transmits introduction requests to us. Some of these providers process data outside the UK; where they do, transfers are made under the UK International Data Transfer Agreement or equivalent safeguards.
We may also disclose data where we are required to by law, or to establish or defend legal claims.
04 How long we keep it
Introduction requests are kept for as long as the enquiry is live and for a reasonable period afterwards, so we can recognise a returning contact. Where an enquiry does not proceed, we delete it once it is clearly closed.
Account records are kept while the account is active and removed once it is closed. Records we must retain for accounting or tax purposes are kept for the period the law requires.
05 Your rights
Under UK data protection law you may ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to our use of it, or ask us to transfer it to another provider. To exercise any of these, email us and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first so we can put it right.
06 Security
Access to enquiry and account data is limited to the people who need it. Administrative tools are restricted to named staff accounts and enforced at the database, not merely hidden in the interface.
07 Changes
If this policy changes materially we will update the date at the top of this page. Continuing to use the site after that means the revised policy applies.
Oryx Black Edition Limited. Registered in England and Wales. Company no. 14244856. Questions about this document: mb@oryxblackedition.com.