Skip links

+ (44) 2080 732 402

Contact us
innoveco international

Privacy Policy

Last updated: 25 October 2026

This Privacy Policy explains how INNOVECO INTERNATIONAL (“INNOVECO”, “we”, “us”, “our”) collects and uses personal data when you visit innoveco.group, contact us or request a consultation. We have written it in plain English. If anything is unclear, please contact us using the details below.

1. Who we are

The controller responsible for your personal data is:

INNOVECO INTERNATIONAL Registered in England & Wales, company number 16193757 20 Wenlock Road, London N1 7GU, United Kingdom Email: [email protected] Phone: +44 2080 732 402

We also have an office in Athens, Greece: 3 Leoforos Galatsiou, 11141 Athens, Greece.

We have not appointed a Data Protection Officer, because we are not required to. For any privacy question, write to [email protected].

2. The personal data we collect

Data you give us

  • Consultation and contact forms: your name, work email address, company, the service you are interested in and, if you choose to give them, your phone number and message. We also record your agreement to this Privacy Policy and the date and time of submission.
  • Emails and phone calls: your contact details and anything you tell us when you email or call us.
  • Clients and prospective clients: business contact details and information needed to prepare a written offer and deliver our services.

Data collected automatically

  • Technical data: when you visit the website, our hosting provider and our content delivery and security provider (Cloudflare) process your IP address, browser type, device information, the pages requested and the date and time. They do this to deliver the website and protect it from attacks and abuse.
  • Fonts: some pages load fonts from Google Fonts, so your browser sends your IP address to Google when the font files are requested.

We do not use analytics, advertising or tracking cookies on this website (see section 9). We do not collect special category data, and we ask you not to include any in your messages.

3. How we use your data and our lawful bases

Purpose Data Lawful basis (UK GDPR and EU GDPR)
Replying to your enquiry, arranging your free consultation and sending you a written offer Form, email and call data Steps taken at your request before entering into a contract (Art. 6(1)(b)); our legitimate interest in responding to business enquiries (Art. 6(1)(f))
Delivering our services and managing our client relationship Client contact and project data Performance of a contract (Art. 6(1)(b))
Keeping business, accounting and tax records Client and invoicing data Legal obligation (Art. 6(1)(c))
Running, securing and improving the website Technical data Legitimate interests in operating a secure, working website (Art. 6(1)(f))
Establishing, exercising or defending legal claims Relevant records Legitimate interests (Art. 6(1)(f))

We will only send you marketing emails, such as newsletters, if you have asked to receive them, and you can unsubscribe at any time. We do not sell your personal data, and we do not use it for automated decision-making or profiling.

4. How long we keep your data

  • Enquiries that do not lead to a contract: 24 months after our last contact, then deleted.
  • Client records: for the duration of our relationship and afterwards for as long as required by law, for example for tax and accounting purposes.
  • Technical and security logs: for the limited periods set by our hosting and security providers.

5. Who we share your data with

We share personal data only where necessary, with:

  • our team in our London and Athens offices, who handle your request;
  • our website hosting provider, Vultr, whose servers are located in Germany (EU);
  • Cloudflare, Inc., which provides content delivery and security for the website;
  • our email service, which delivers emails, including the emails sent by our website forms;
  • Google (Google Fonts), which delivers font files;
  • professional advisers (such as accountants and lawyers), and authorities where we are legally required to share data.

Where these organisations act as our processors, they may only use your data on our instructions and must keep it secure.

6. International transfers

We operate in the United Kingdom and the European Union (Greece). Personal data can flow between our London and Athens offices; the UK and the EU recognise each other’s data protection rules as adequate.

Some providers (such as Cloudflare and Google) may process data in the United States or other countries. Where this happens, we rely on appropriate safeguards: the EU-US Data Privacy Framework and its UK Extension where the provider is certified, or Standard Contractual Clauses (and the UK International Data Transfer Addendum).

7. Your rights

Under UK GDPR and EU GDPR you have the right to:

  • access the personal data we hold about you;
  • rectify inaccurate or incomplete data;
  • erase your data in certain circumstances;
  • restrict our processing in certain circumstances;
  • object to processing based on our legitimate interests, and to direct marketing at any time;
  • data portability, where processing is based on contract or consent and carried out by automated means;
  • withdraw your consent at any time, where we rely on consent. This does not affect processing before the withdrawal.

To exercise any of these rights, email [email protected]. We will reply within one month. We may need to confirm your identity before acting on your request.

8. Complaints

If you have concerns, please contact us first so we can try to resolve them. You also have the right to complain to a data protection authority:

  • United Kingdom: Information Commissioner’s Office (ICO), ico.org.uk, helpline 0303 123 1113.
  • Greece: Hellenic Data Protection Authority (HDPA), Kifisias 1-3, 115 23 Athens, www.dpa.gr, +30 210 6475600.

If you live elsewhere in the EU, you can also complain to the authority in your own country.

9. Cookies

Cookies are small files stored on your device. This website does not use analytics, advertising or social media tracking cookies.

  • Strictly necessary cookies: our security provider Cloudflare may set cookies (for example __cf_bm) to tell people apart from bots and protect the site. These cookies do not identify you personally, and they are exempt from consent because they are essential for security.
  • Website administration: WordPress sets login cookies only for our staff when they sign in to manage the website.

The website links to our profiles on LinkedIn, Facebook, X and YouTube. These are simple links: no content from those platforms loads until you click one, and then that platform’s own privacy policy applies.

If we add analytics or other non-essential cookies in the future, we will ask for your consent first and update this policy.

10. Security

We use appropriate technical and organisational measures to protect your data. These include encrypted connections (HTTPS), access controls and reputable providers. No method of transmission over the internet is completely secure, but we work to protect your information.

11. Children

Our services are aimed at businesses and organisations. We do not knowingly collect data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time, and we will publish the new version on this page with an updated date.

13. Contact

INNOVECO INTERNATIONAL, 20 Wenlock Road, London N1 7GU, United Kingdom. Email [email protected], phone +44 2080 732 402.