EOSYN Space Ltd is the controller for personal data processed via eosynspace.com and the EOSYN Space platform. This policy explains what we collect, why we collect it, how long we keep it, and the rights available to you under UK GDPR and the EU GDPR.
Last updated:
1. Controller and data protection contact
Controller: EOSYN Space Ltd, registered in England and Wales. Our Data Protection Officer can be reached at dpo@eosynspace.com. For non-EEA subjects, the Belgian non-profit EOSYN Space VZW/ASBL acts as controller for programmes operated at eosynspace.org.
2. What we collect
Account data — name, business email, organisation, role.
Usage data — API calls, feature usage, latency and error telemetry.
Device data — IP address, user agent, coarse region, referrer.
Communications — messages sent to sales, support or careers.
Payment data — processed by our payment provider; we do not store card numbers.
3. Why we process it (lawful bases)
Performance of a contract — to deliver the Services you request.
Legitimate interests — to secure, monitor and improve the Services.
Legal obligation — to meet accounting, tax and regulatory duties.
Consent — for optional analytics and marketing cookies (see Cookies).
4. Sharing and sub-processors
We share personal data with vetted sub-processors under Article 28 GDPR contracts. Our current sub-processor list — including infrastructure, analytics, communications and payment providers — is published on /trust. We do not sell personal data.
5. International transfers
Where personal data is transferred outside the UK or EEA, we rely on adequacy decisions or the UK Addendum to the EU Standard Contractual Clauses, supported by a documented Transfer Impact Assessment.
6. Retention
Account data — for the life of the account plus 24 months.
Usage telemetry — 13 months, then aggregated.
Contact-form submissions — 24 months.
Financial records — 7 years (statutory).
7. Your rights
Subject to law you may request access, rectification, erasure, restriction, portability, and objection to processing. Submit a request to dpo@eosynspace.com. You may lodge a complaint with the UK ICO or your local supervisory authority.
8. Security
We operate an ISO 27001-aligned information security programme with encryption in transit and at rest, least-privilege access, comprehensive audit logging, and coordinated disclosure at security.txt.
9. Automated decision-making
The platform produces confidence-scored geospatial outputs used as decision support by our customers. EOSYN Space itself does not make solely automated decisions with legal or similarly significant effect on data subjects.
10. Changes
Material changes are notified via a banner on eosynspace.com and, where you hold an account, by email. The current version is always available at /privacy.