1. Who we are

Enlightened ERP Limited (“we”, “us”, “our”) is a company registered in England and Wales. We operate the website www.enlightened-erp.co.uk (the “Site”).

For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller of the personal data described in this policy.

2. What personal data we collect

2.1 Data you provide to us

When you submit an enquiry via our contact form, we collect:

• Your name
• Your email address
• Your telephone number (if provided)
• The content of your message

2.2 Data collected automatically

When you visit our Site, we and our third-party service provider Google Analytics may automatically collect:

• Your IP address (anonymised)
• Browser type and version
• Pages viewed and time spent on the Site
• Referring website
• Device and operating system information

2.3 Data collected via our booking agent

If you use the booking widget on our Site to arrange a call or meeting, we collect:

• Your name
• Your email address
• Your preferred date and time
• Any notes or messages you provide

3. How we use your personal data

We use your personal data for the following purposes:

• To respond to your enquiry. When you contact us via the website form, we use your name, email address and message content to reply to you. Our lawful basis is our legitimate interest in responding to business enquiries.
• To facilitate meeting bookings. If you use our booking agent widget, we use your name, email address, date and time preference, and any notes to arrange and confirm a call or meeting with you. Our lawful basis is our legitimate interest in managing business appointments.
• To analyse and improve our Site. We use Google Analytics to understand how visitors use our Site and to improve its content and performance. Our lawful basis is your consent, which you may provide or withdraw via our cookie banner.
• To comply with legal obligations. We may process your data where required to do so by law.

4. Cookies

Our Site uses cookies — small text files placed on your device. We use the following types:

• Strictly necessary cookies: Required for the Site to function. These do not require your consent.
• Analytics cookies (Google Analytics): Used to collect anonymous statistical information about how visitors use our Site. These are only placed with your consent.

You can control cookies through your browser settings or via our cookie consent tool on the Site. For more information about Google’s data practices, visit policies.google.com/privacy.

5. How we share your personal data

We do not sell or rent your personal data to third parties. We share your data only with:

• Google LLC (Google Analytics): For website analytics purposes. Google may transfer data outside the UK. Google participates in the UK’s international data transfer mechanisms.
• Microsoft Corporation (Microsoft 365 / Outlook): Contact form submissions are delivered to our email inbox hosted on Microsoft 365.
• Railway (booking agent): Our website includes a booking agent widget hosted on Railway. If you use this to book a call or meeting with us, your name, email address, preferred date and time, and any notes you provide will be processed by this service in order to facilitate the booking.
• Legal and regulatory bodies: Where required by law or to protect our legal rights.

6. How long we keep your data

• Contact form enquiries: Retained in our email system for up to 2 years, or until the business relationship concludes, whichever is longer.
• Booking agent data: Retained for up to 2 years for the purposes of managing and following up on meetings arranged through the Site.
• Analytics data: Retained in accordance with Google’s standard data retention settings (up to 26 months by default).

7. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure: You can ask us to delete your personal data where there is no compelling reason for its continued processing.
• Right to restrict processing: You can ask us to restrict how we use your data in certain circumstances.
• Right to data portability: You may request your data in a structured, commonly used and machine-readable format.
• Right to object: You can object to processing based on legitimate interests.
• Right to withdraw consent: Where we rely on consent (e.g. analytics cookies), you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.

8. Right to lodge a complaint

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO):

We would however appreciate the opportunity to address your concerns before you contact the ICO, so please do contact us in the first instance.

9. External links

Our Site may contain links to third-party websites, including our Microsoft Bookings page. We are not responsible for the privacy practices of those sites and encourage you to read their privacy notices.

10. Changes to this privacy policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. We encourage you to review this policy periodically.