Privacy policy

Who is responsible

Whitehay Capital Limited operates this website and is the controller of the personal information described here. Edda is the name used for our service.

Registered in England and Wales, company number 15635421. Registered office: 167-169 Great Portland Street, Floor 5, London, England, W1W 5PF.

For privacy questions or to exercise your rights, email sales@withedda.com or write to the Edda team at 12 Melcombe Place, London, UK, NW1 6JJ.

What we collect

• Enquiries: your name, work email, company and any message you submit through the contact form. We also receive the information you choose to include in emails, calls or other correspondence with us.
• Business correspondence: contact details, your role, the requirements you discuss with us and records of our conversations, proposals and agreed work. A colleague may give us your business contact details to include you in a discussion.
• Technical information: your IP address and request information needed to deliver and protect the site. Our hosting services may record the page requested, request time, browser information and error or security events. The contact form also uses your IP address to limit repeated requests.

The contact form asks for your name, work email and company so we can respond. Your message is optional. You are not legally required to use the form; you can email us instead. Please do not send passwords, financial account details, health information or confidential client records through the website.

How and why we use it

• Responding to enquiries and discussing work: we use your details and correspondence to answer questions, arrange meetings and prepare relevant proposals. We rely on our legitimate interests in responding to people who contact us and developing business relationships. Where you personally ask us to take steps towards a contract with you, we may instead rely on that contractual purpose.
• Managing a business relationship: we use relevant correspondence to coordinate agreed work, maintain records and resolve questions or disputes. We rely on our legitimate interests in running the business, performance of a contract where you are a party to it, and legal obligations where applicable.
• Protecting and operating the website: we use technical information to deliver pages, investigate errors and prevent spam or misuse. We rely on our legitimate interests in maintaining a secure, functioning website.

Submitting an enquiry does not subscribe you to a newsletter. We do not use the website form to make solely automated decisions with legal or similarly significant effects on you.

Your right to object

You can object to processing based on legitimate interests because of your particular situation. You can also object to direct marketing at any time. Contact sales@withedda.com.

Who receives your information

The Edda team handles enquiries. We use service providers for website hosting, email delivery, business email and the administration of our work. The website runs on Railway, and the contact form uses Resend to deliver your enquiry to our team mailbox. Business email is handled through Google Workspace. These providers process information needed to supply their services.

We may also share relevant information with professional advisers or public authorities where necessary to obtain advice, comply with the law, or establish, exercise or defend legal claims. Access should be limited to the information needed for that purpose.

International processing

Our service providers may process information outside the UK and the European Economic Area, including in the United States. Resend identifies the United States as its primary processing location. Its data processing terms incorporate standard contractual clauses and the UK addendum for transfers where required. Railway and Google also publish data processing terms for their services.

Contact sales@withedda.com for information about the arrangements that apply to your data and how to obtain a copy of relevant transfer safeguards.

How long we keep information

We keep enquiry and correspondence records for as long as they are needed to respond, maintain an active business relationship and deal with associated legal, accounting or dispute requirements. We consider the purpose of the record, whether the discussion is still active, applicable legal requirements and whether the information remains necessary.

The contact form's temporary rate-limit record expires after a ten-minute window and is cleared on a later request or a server restart. This is separate from email records and the operational logs kept by service providers. You can ask us about a particular record or request its deletion.

Your rights and complaints

Depending on the circumstances, you can ask to access, correct or erase your personal information, restrict its use, object to its processing, or receive a portable copy. If we rely on consent for a particular activity, you can withdraw that consent at any time without affecting earlier lawful processing. We may need to confirm your identity before responding.

Contact sales@withedda.com to make a request or raise a concern. You can complain directly to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to contact us first. Where applicable, you may also contact your local data protection authority.

Cookies, storage and linked sites

Our cookies and storage notice explains the website's use of browser storage and technical requests. Other websites linked from Edda have their own privacy notices.

Client deployments of Edda

This notice concerns our website and business correspondence. It does not replace the privacy information or agreements for an Edda system deployed for a client. The client determines how its company information is used, who can access it and which services are connected. Where we process personal information on a client's behalf, the relevant service and data processing agreements govern that work. Please direct requests about a client's records to that organisation in the first instance.

Changes to this notice

We update this notice when our practices change. The date above shows when it was last revised. Where a change materially affects how we use your information, we will provide the additional notice required by law.