Updated 28/09/2025
This notice contains important information about how we, attaché x® Digital (the consulting arm of attaché x ltd), collect and process personal data:
- through your use of our website, digital.attachex.com;
- by signing up for our newsletters, webinars, or other marketing activities; or
- as a staff member or other representative of one of our business clients, prospective clients, or suppliers.
This notice also contains information about your rights as a person whose information we process. Any changes we make to this notice in the future will be posted on this page.
Information About Us
attaché x® Digital is the digital consulting arm of attaché x ltd, a UK-registered company. For the purposes of this policy, attaché x ltd (referred to as “we”, “us” or “our”) is the controller responsible for the personal data we collect about you. If you have any questions, you can contact us at efficiency@attachex.com.
Your Personal Data
Information provided to us by you or about you
As a business-to-business (B2B) service provider, we primarily collect data in a professional context. You will provide some or all of the following information when you contact us, engage our services, or subscribe to our communications:
- Your Professional Identity and Contact Details – Includes your name, job title, company name, work email address, and your business telephone number.
- Enquiry and Communications Data – Information you provide when you fill out a contact form, email us, or communicate with our team, including the content of your messages.
- Client and Project Data – In the course of providing consulting services, we may be granted access to systems or data belonging to your organization. This data is processed on behalf of you, our client. Our handling of this data is governed by a separate, confidential client agreement (such as a Master Services Agreement or Data Processing Agreement) which defines us as the “data processor” and you, the client, as the “data controller”.
We do not collect any categories of sensitive personal data (except where necessary in relation to our own employees). We do not knowingly collect data relating to children.
Information We Collect When You Interact With Us
As you interact with our website and communications, we may automatically collect Usage and Technical Data about your equipment and browsing actions. We collect this data by using cookies, server logs, and similar technologies.
- Usage Data – Includes information about how you use our website (e.g., pages visited, content viewed) and how you interact with our email communications.
- Technical Data – Includes your Internet protocol (IP) address, browser type and version, time zone setting, operating system, and platform.
What We Use Your Personal Data For
Data protection law allows us to process personal information where we have a legitimate interest to do so. We use your personal data for the following purposes:
- To fulfill a contract with the business you represent: delivering the consulting, digital transformation, and technology services requested by your organization.
- To manage our business relationship: communicating with you about ongoing projects, providing support, and managing billing and administration.
- For business development: responding to your enquiries and providing you with information about our services.
- To improve our business and services: analysing sales and website usage data to understand industry trends and improve our service offerings.
- To ensure security: as part of our efforts to keep our website and systems safe and secure.
Direct Marketing
We need your consent for direct marketing communications. If you have provided your consent (e.g., by subscribing to our newsletter), we may use your professional contact information to send you business insights, case studies, and information about services that may be of interest to you and your organization.
You can opt-out of these communications at any time by clicking the “unsubscribe” link in our emails.
Who We Share Your Personal Data With
We do not sell your personal data. We may share your professional contact information with:
- Third-party service providers and sub-processors: We engage third parties to support our business operations, such as cloud hosting providers (e.g., AWS, Azure), CRM platforms, and project management tools. These parties are contractually bound to process data only on our instructions and to maintain its confidentiality and security.
- Other entities within the attaché x ltd group: To provide a seamless service.
- Professional advisors: Including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
Security Of Your Personal Data
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. All information you provide to us is stored on secure servers. Furthermore, we limit access to your personal data to those employees, agents, and contractors who have a business need to know.
Outside UK – Data Storage & Transfer
Most of the data we collect is processed and stored within the UK or European Economic Area (EEA). If we need to transfer your personal data outside of these areas, we will ensure it is protected by appropriate legal safeguards, such as using standard contractual clauses approved by the UK authorities, to ensure your data receives the same level of protection as it has in the UK.
How Long Do We Keep Your Personal Data For
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for.
- If you are a representative of a business client or supplier, we will keep your data for the duration of that business relationship and for a reasonable period thereafter to deal with any unresolved issues or to comply with legal, accounting, or reporting requirements.
- If you have subscribed to our marketing communications, we will keep your data until you inform us that you no longer wish to receive them.
Your Rights
You have the following rights under data protection law:
- Request access to the personal data we hold about you.
- Request correction of any inaccurate data we hold about you.
- Request the erasure of your personal data where there is no good reason for us to continue processing it.
- Object to processing of your personal data.
- Request the transfer of your personal data to you or to a third party.
- Withdraw consent at any time where we are relying on consent to process your data.
You can exercise these rights by emailing us at intelligence@attachex.com. You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.