Privacy Policy

1. Who we are

EOR Services is a trading name of Cyber Spark IT Services Ltd ("we", "us"), a company registered in England and Wales (company number 14891489), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We are the data controller for the personal data described in this policy, which covers www.eor-services.co.uk and enquiries you send us.

Personal data we process when we employ or pay people for our clients (for example payroll records) is covered by separate privacy notices given to those employees and by our agreements with clients.

2. What we collect

• When you contact us: your name, work email, and any phone number, company name, enquiry type and message you give us through our enquiry forms.
• When you browse: our hosting provider processes technical data such as your IP address and browser type to deliver the site and protect it from abuse. We don't currently use analytics or advertising cookies. If we add them, they will only run after you accept them (see our Cookie Policy).

Please don't include special category data (such as health information) or payroll details in a website form. We'll ask for what we need through a secure route once we're working together.

3. How and why we use it

• Replying to enquiries and preparing quotes: necessary to take steps you ask for before entering into a contract, or our legitimate interest in running our business.
• Internal notifications: when you submit a form, a summary is emailed to our team and may be posted to an internal messaging channel so a person can respond promptly (our legitimate interest in a timely service).
• Preventing spam and abuse: Cloudflare Turnstile distinguishes people from bots on our forms, and we keep a short-lived, hashed record of submission attempts (our legitimate interest in keeping the site secure).

4. Who we share it with

We don't sell personal data or share it for other companies' marketing. Service providers process it on our behalf and only on our instructions:

• Cloudflare hosts the website, stores enquiries (Workers and D1 database) and provides Turnstile bot protection.
• Resend sends the email notifications described above.
• Slack may receive the internal notification summary described above.

5. International transfers

Some of these providers may process data outside the UK, including in the United States. Where that happens we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or the UK-US data bridge where the provider is certified.

6. How long we keep it

We keep enquiry data for as long as we need to respond and for a reasonable period afterwards in case you follow up. If you become a client, we keep records for as long as the law and our contract require. You can ask us to delete your data sooner (see section 8).

7. Security

Enquiries are stored in access-controlled systems behind a password-protected dashboard used only by our team. No system is completely secure, but we take reasonable technical and organisational steps to protect your data.

8. Your rights

Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or give it to you in a portable format, and you can withdraw consent where we rely on it. Email info@eor-services.co.uk. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

9. Changes

We may update this policy as our website or services change. The date above shows when it was last revised.

10. Contact

Email info@eor-services.co.uk or write to Cyber Spark IT Services Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.