Skip to main content

Privacy

Privacy notice

Last updated 5 November 2026. This explains how Talos Delta uses the details you share with us through this website, by email, by phone or WhatsApp, and when you book an assessment.

Who we are

TALOS DELTA LTD (“Talos Delta”, “we”) is the controller of the personal information described here. We are a private limited company registered in England and Wales, company number 16516457. Our registered office is 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.

For any privacy question, request or complaint, email hello@talosdelta.com.

Enquiries

When you use our contact form we receive your name, email address, company name and job title. These four are required so that we can understand who is asking and reply. You can also choose to give your company website, a phone number and a message. If you prefer, email us instead and share only what you are comfortable with. We also keep anything you send in later emails.

Our email provider, Resend, delivers your enquiry to our mailbox and sends you an automatic confirmation. We use your details to reply, to discuss whether and how we can help, and to keep a record of our business correspondence. Please do not send passwords, payment details or sensitive personal information such as health information.

Our lawful basis is our legitimate interests in responding to business enquiries, discussing possible work and keeping a record of our business correspondence. People who contact us for their business would reasonably expect this. If you contact us about services for yourself, for example as a sole trader, we may instead rely on the processing being necessary to take steps you have asked for before entering into a contract with you, but only for what those steps actually require.

Assessment bookings

Our booking links take you to Cal.com, which collects your booking. Cal.com records your name, email address, the time you choose and your answers to the booking questions, and adds the meeting to our Google calendar. Cal.com emails a confirmation to both of us, and any reminders the event is set up to send. If the meeting is held on Google Meet, its link is created through our Google account. Only the information the booking form marks as required is needed to make a booking.

We use this information to hold and prepare for the meeting and to follow up afterwards. Our lawful basis is the same as for enquiries: our legitimate interests in arranging and holding the meetings you request, or, if you book for yourself rather than for an organisation, the processing being necessary to take steps you have asked for before a possible contract with you. Please do not include passwords, payment details or sensitive personal information in your answers.

Cal.com handles your booking on our behalf under a data processing agreement. Its own privacy policy covers what it does as a business in its own right, such as running its website; it does not replace this notice.

Phone and WhatsApp

If you call, text or message our business mobile, including on WhatsApp (for example from this website or our Google Business Profile), we receive your phone number, what you tell or send us and, on WhatsApp, the profile details your WhatsApp settings let us see. We use this to reply and to discuss whether and how we can help, on the same lawful basis as enquiries. Please do not send passwords, payment details or sensitive personal information.

We use the WhatsApp Business app on our own phone. WhatsApp, which WhatsApp LLC (part of Meta) provides in the UK, delivers our chats with end-to-end encryption, so it cannot read them. It removes messages from its servers once they are delivered, and keeps undelivered ones in encrypted form for up to 30 days. Under its business terms, WhatsApp handles the contact details we share with it on our behalf. It also uses some information for its own purposes, such as how the service is used, under its own privacy policy, and shares some information with other Meta companies.

We do not use automated or AI replies, and we do not send marketing messages on WhatsApp. Disappearing messages are off, so chats stay on our phone until we delete them under the retention rules below. We have set WhatsApp to back up our chats to Apple’s iCloud each day using WhatsApp’s end-to-end encrypted backup, which is protected by a password or key that only we hold.

WhatsApp can use only the phone contacts we choose to share with it. For those contacts, which can include existing clients, it receives the phone number so that it can show who uses WhatsApp. Calls and texts are also handled by the phone networks involved, under their own terms.

Keeping the website and inbox secure

The website keeps short-lived counters in memory to limit repeated submissions and, for about ten minutes, a one-way code derived from your email address so that you do not receive duplicate confirmations. Anyone who knows your email address could derive the same code, so we treat it as personal information. These are not written to disk. Expired entries are removed the next time the website uses them, and all are lost when the service restarts. Our application logs record that an enquiry was processed, its length and a delivery outcome, but are designed not to record your name, email address, company or message. Like most websites, our hosting infrastructure may record technical details of each visit, such as your IP address, browser type and the page requested.

Our lawful basis is our legitimate interests in keeping this website, our inbox and the people who use them safe from abuse, spam and misuse.

Who receives your information

  • Resend (email delivery), which sends enquiries to us and confirmations to you.
  • Cal.com (scheduling), which takes and manages bookings.
  • Google (our calendar and Google Meet), which holds booked meetings and sends invitations.
  • Our email provider (Google) and website host (Hetzner), which store our mailboxes and run this website.
  • WhatsApp (Meta), which carries WhatsApp messages and calls, and Apple (iCloud), which stores our encrypted WhatsApp chat backups.

We do not sell your information or use it for advertising. We may share it with professional advisers, or where the law requires it.

Making an enquiry or booking never signs you up to marketing. If we ever offer a newsletter, it will be separate and you will only receive it if you choose to subscribe.

International transfers

Resend and Cal.com store and process information in the United States. Each relies on the UK Extension to the EU-US Data Privacy Framework, or on the UK Addendum to the EU Standard Contractual Clauses, to protect information transferred from the UK.

This website runs on a Hetzner server in Germany. UK law recognises Germany as providing adequate protection.

WhatsApp LLC is based in the United States. For the contact details it handles on our behalf, its business terms apply the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. WhatsApp’s privacy policy explains the safeguards for information it uses for its own purposes. Our encrypted WhatsApp backups are stored in Apple's iCloud, which may be outside the UK; they cannot be read without our password or key.

We have set Google Workspace to store the data its data-region setting covers, such as email and calendar content at rest, in Europe. Google may still process that data, and store data the setting does not cover, in other countries including the United States, under its data-processing terms and the transfer safeguards they include.

How long we keep it

  • Enquiries and bookings that do not lead to work, including related emails, WhatsApp chats, texts, Cal.com booking records and calendar events: we review them for deletion once 12 months have passed since our last contact and delete them by our next quarterly review, so within 15 months of our last contact. We may delete them sooner when we no longer need them, for example obvious spam.
  • If we work together, contracts, proposals and the correspondence that records what was agreed or delivered: kept for six years after the engagement ends, in case of a dispute or claim, and deleted at the next quarterly review. Routine project emails and messages, including WhatsApp chats, not needed for that purpose follow the 12-month rule from the end of the engagement.
  • Invoices and other accounting records: kept for six years from the end of the company financial year they relate to, or longer where the law requires it, and deleted at the next quarterly review.
  • We keep information longer only while it is needed for an unresolved complaint, dispute or legal claim, or where the law requires it.
  • Resend keeps copies of the emails it sends and its delivery logs for 30 days.
  • Technical logs from this website and its hosting: used to diagnose faults and prevent abuse. The website and web server logs are overwritten automatically once they reach a size limit, not after a set time, so on a quiet website entries can last longer than 30 days. No time limit is currently set.
  • Deleted information can remain in our providers' deleted-items folders and backups for a period those providers set, before it is permanently removed. Copies in your own mailbox or calendar are under your control.

We keep contract records on the basis of our legitimate interests in establishing or defending legal claims, and accounting records to meet our legal obligations.

Your rights

You have the right to ask for a copy of your personal information and to ask us to correct it. In some circumstances you can also ask us to delete it, to restrict how we use it, or to transfer it to another organisation; these rights depend on why we hold it and are not absolute. We reply without undue delay and within one month, or tell you within that month if a complex request needs up to two more months.

Right to object: where we rely on legitimate interests, you can object at any time. We will then stop unless we have compelling legitimate grounds that override your interests, or need the information for legal claims. You can always object to direct marketing, and we will stop.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

Complaints

If you are unhappy with how we have handled your information, please tell us first at hello@talosdelta.com or by any other means. We will acknowledge your complaint within 30 days of receiving it, look into it without undue delay, keep you informed of progress and tell you the outcome.

You also have the right to complain to the ICO, the UK’s data protection regulator, at ico.org.uk/make-a-complaint.

Cookies and similar technologies

Our website code does not set cookies or run analytics or advertising scripts. By default the website follows your device’s light or dark setting and stores nothing. If you choose Light or Dark yourself, your browser keeps that choice in its local storage, under the name “talosdelta-theme”, so the website looks the same on your next visit. It stays on your device and is never sent to us; choosing “Follow device setting” again removes it. The website uses no other local or session storage. Its fonts and images are served from this website. The emails we send through Resend do not use open or click tracking. If you follow a link to Cal.com, LinkedIn or another site, that site’s own cookie and privacy policies apply.

Changes to this notice

We will update this notice when our use of personal information changes and show the date of the latest version at the top.

This notice is our own. Its structure follows the ICO's privacy notice generator for customer and supplier information (general business), from the Information Commissioner's Office, Create your own privacy notice (last updated 10 July 2026), licensed under the Open Government Licence v3.0. The ICO has not reviewed or endorsed this notice.