Privacy

We are a governance business. We treat your information the way we would advise you to treat your clients’.

We collect only what we need to talk to you and to do the work: your name, your email, and whatever you choose to tell us. We never sell it, never share it, and never pass it to anyone else without your explicit say-so. We keep it only as long as we need it, then we delete it.

That is the whole policy. The detail below is for completeness, and because a privacy notice has to say certain things plainly. If anything here is unclear, email us and we will explain it in normal English.

Hyperion Analytics is the trading name of Christopher Knox, operating as a sole trader and acting as the data controller for the information described here.

We only collect personal information at the points where you give it to us. There are no hidden forms, no accounts to create, and nothing collected in the background beyond the anonymous visitor numbers described under “Cookies and analytics” below.

The points where we collect information are:

When you book a call. Our booking is handled by Calendly, which collects your name and email so we can schedule and hold the meeting, along with anything you choose to add in the booking notes.

When you email us, or return a completed assessment. If you write to us, or fill in our governance assessment and send it back, we receive whatever you have put in that email or document. A completed assessment may include information about your business and, if you include them, the names of colleagues.

That is the full extent of it. We do not buy in data about you, and we do not build profiles.

Under UK data protection law we rely on two grounds: taking steps at your request before entering into a contract (responding to your enquiry, holding the call, scoping work), and our legitimate interest in running and corresponding about our business. Where we ever need anything beyond that, we will ask for your consent first.

Only to do the thing you contacted us for: to reply to you, hold the conversation, review your assessment, and carry out any work you go on to engage us for. We do not use your information for marketing, and we do not use it to train any AI model.

We do not share your information with anyone, and we never sell it. The only third parties who handle it are the service providers we use to run the business, and only to the extent they need to:

• Calendly, for scheduling calls.
• Microsoft 365 (provided through GoDaddy), for our email.
• Cloudflare, which hosts our website and provides anonymous visitor analytics.

These providers act on our instructions and are bound by their own data protection obligations. The only time we would ever pass your information to anyone else, for example a specialist we bring in to help with your work, or the ICO if we were acting on your behalf, is with your explicit agreement first.

In the course of our work, we may use professional software tools to help us, including AI-assisted tools. We choose those tools with your confidentiality in mind, we never use your information for marketing, and we never make it public nor pass it on without your express consent. We treat everything you send us as confidential.

Your information is held within the systems of the providers named above. Some of them may process data outside the UK; where they do, they are required to provide protections recognised under UK data protection law.

We keep information related to an engagement for 90 days after that engagement closes, unless you ask us to delete it sooner. Where an enquiry does not lead to any work, we keep it for up to 12 months and then delete it. We do not hold on to anything longer than we have a reason to.

You have the right to ask us what information we hold about you, to have it corrected, to have it deleted, to object to how we use it, and to ask for a copy of it. To exercise any of these, just email enquiries@hyperionanalytics.co.uk and we will sort it out. There is no charge, and no special process — ask us plainly and we will respond plainly.

If you are ever unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk, though we would always rather you told us first so we can put it right.

We want to know roughly how many people visit the site, so we use Cloudflare Web Analytics. It does not set cookies, does not track you across other websites, and does not collect anything that identifies you personally. Because we set no tracking cookies, there is no cookie banner to click through.

If we change how we handle information, we will update this page and change the date below.