Home / Privacy notice
Legal
Privacy notice
How we collect, use and protect personal information when you visit this website or get in touch with us, and the rights you have over it.
Last updated: 22 September 2026
1. Who we are
This website is operated by Exchequer Risk Management FX Limited, trading as EFX Tech ("we", "us", "our"). We are the data controller for the personal information described in this notice, which means we decide how and why it is used.
Exchequer Risk Management FX Limited, trading as EFX TechRegistered in England and Wales, company number 13652239
Registered office: No3 Siskin Drive, Middlemarch Business Park, Coventry, CV3 4FJ
Email: info@efx-tech.online
If you have any question about this notice or how we handle your information, please email us at the address above, marked for the attention of the data protection contact.
2. The information we collect
We collect only what we need:
- Enquiry details you give us through the contact form: your name, company, work email address, phone number (optional), sector, the service you are interested in, an optional budget range, and the content of your message.
- Correspondence when you email us, speak with us or attend a meeting, including your contact details and what we discuss.
- Technical information needed to deliver the website securely, such as your IP address, browser type and the pages requested. This is recorded in our hosting provider's server logs for security and to keep the site working.
We do not ask for, and ask you not to send, special category information (such as health data) or sensitive financial information through the contact form. Where a project requires us to handle personal data on your behalf, that is covered by a separate written agreement, described in section 9.
3. How we use it and our lawful basis
UK data protection law requires us to have a lawful basis for each use of your information.
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and discussing a potential project | Our legitimate interests in responding to people who contact us, or taking steps at your request before entering into a contract |
| Providing services under a contract with you or your organisation | Performance of a contract, or our legitimate interests where the contract is with your employer |
| Keeping this website secure, preventing misuse and fixing faults | Our legitimate interests in operating a secure and reliable website |
| Keeping business and accounting records | Compliance with our legal obligations |
| Establishing, exercising or defending legal claims | Our legitimate interests |
We do not sell your personal information. We do not use it for direct marketing unless you have asked to hear from us, and you can opt out at any time. We do not carry out automated decision-making that has legal or similarly significant effects on you.
4. Who we share it with
We share your information only with service providers who help us run our business, acting on our instructions under contract and required to protect it:
- Netlify, Inc. hosts this website and processes contact form submissions.
- IONOS SE provides our domain and business email services.
- Professional advisers such as accountants and lawyers, where necessary.
We may also disclose information where the law requires it, or to protect our rights, property or safety or those of others.
5. International transfers
Some of our service providers, including Netlify, may process personal information outside the United Kingdom, including in the United States. Where this happens, we make sure the transfer is protected by an appropriate safeguard recognised under UK law, such as UK adequacy regulations (including the UK–US data bridge, where the recipient is certified under it) or the International Data Transfer Agreement or Addendum approved by the Information Commissioner. You can ask us for more information about these safeguards.
6. How long we keep it
- Enquiries that do not lead to work are deleted within 24 months of our last contact.
- Client and contract records are kept for the duration of our relationship and then for up to six years, to meet our legal, tax and accounting obligations and to deal with any claims.
- Server logs are kept by our hosting provider for a short period, in line with its standard retention, for security purposes.
7. How we protect it
We use appropriate technical and organisational measures to protect personal information, including encryption in transit, access limited to people who need it, and service providers that meet recognised security standards. No method of transmission over the internet is completely secure, but we work to protect your information and will notify you and the Information Commissioner where the law requires it in the event of a breach.
8. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete your information;
- ask us to restrict how we use it;
- object to our use of it where we rely on legitimate interests;
- ask for your information in a portable format, where applicable; and
- withdraw consent at any time, where we rely on consent.
To exercise any of these rights, email info@efx-tech.online and we will respond within one month. There is normally no charge. We may need to confirm your identity before acting on a request.
9. When we process data for our clients
When we build or support systems for a client, we may handle personal information that belongs to that client's own customers or staff. In that case our client is the data controller and we act as a data processor on their instructions, under a written data processing agreement. This notice does not cover that processing; the client's own privacy notice does.
10. Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk/make-a-complaint or on 0303 123 1113.
11. Cookies and similar technologies
This website does not use cookies, analytics, advertising trackers or social media plugins, so we do not ask for cookie consent.
Fonts, images and scripts are all served from our own domain, so visiting this website does not send your information to any third-party content provider. Your browser may keep a local copy of files such as images and fonts to load pages faster; this does not identify you.
If we introduce cookies or analytics in future, we will update this notice first and, where the law requires, ask for your consent before setting any non-essential cookie.
12. Links to other websites
This website may link to other websites. We are not responsible for their content or privacy practices, and we encourage you to read their privacy notices.
13. Changes to this notice
We may update this notice from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.