1. Who we are

This privacy policy applies to the AESOP Answers website at aesop-answers.com and the report services provided through it.

The data controller is Integrity Defence Solutions UK Ltd, a company registered in England and Wales under company number 15987740, with its registered office at Knoll House, Knoll Road, Camberley, Surrey, GU15 3SY, United Kingdom.

We are registered with the Information Commissioner's Office (ICO) under registration number ZB914735.

If you have any questions about this policy or how we handle your data, please contact us at dpo@integrity-defence.co.uk.

2. What data we collect and why

We collect only the data we need to provide the report service and comply with our legal obligations.

Data	Purpose	Lawful basis
Name & email address	To identify you, communicate with you (including marketing our services) and deliver your report	Contract performance (Art 6(1)(b))
Company name & address	To verify requests come from genuine organisations, market our services and to ensure compliance with UK and local tax legislation	Contract performance (Art 6(1)(b))
VAT number, local tax ID & company registration number	To verify requests come from genuine organisations and to ensure compliance with UK and local tax legislation	Contract performance (Art 6(1)(b))
LinkedIn URL	To verify requests come from genuine individuals & organisations	Contract performance (Art 6(1)(b))
Your question and context	To produce your report	Contract performance (Art 6(1)(b))
Documents you share (Tailored tier)	To incorporate your data into the report	Contract performance (Art 6(1)(b))
Payment data (via Stripe)	To take payment for your report	Contract performance (Art 6(1)(b))
Contact form submissions	To respond to your enquiry	Contract performance (Art 6(1)(b))

3. International data transfers

The AESOP analytical platform used to produce your report is operated by Integrity Defence Solutions Inc. ("IDS Inc"), our parent company, on Amazon Web Services infrastructure hosted in the United States. However, the preparation of your report does not require any of your personal information to be transferred outside the UK and therefore the information transferred to the United States is not considered to be a “restricted transfer” under UK GDPR.

Payment data is processed by Stripe Inc. in accordance with Stripe's own privacy policy and data transfer safeguards.

4. Who we share your data with

We do not sell your personal data. We do not share it with third parties for marketing. We share data only in the following limited circumstances:

• Stripe Inc. — our payment processor, acting as a data processor under its own terms. Stripe handles your payment card data; we never see or store your full card details.

• Our analysts and staff — who need access to your submission in order to produce your report.

• Legal obligation — if we are required to disclose data by law, court order, or regulatory requirement.

5. How long we keep your data

• Report submissions and completed reports: retained for 5 years from the date of delivery, then securely deleted.

• Payment records: retained for 7 years to comply with HMRC requirements.

• Contact enquiries: retained for 3 years from the date of the enquiry, then deleted.

6. Anonymised reports

If you choose the Public tier, we will publish an anonymised version of your report on our website one week after delivery to you. Before publication, we remove your name, company name and any information that could — by reverse engineering — identify you or your organisation. The sector analysis and general recommendations are not removed.

If you have concerns about the anonymisation of your report, please contact us before the one-week window closes.

7. Your rights under UK GDPR

You have the following rights regarding your personal data. To exercise any of them, contact us at dpo@integrity-defence.co.uk.. We will respond within one calendar month.

• Right of access: to receive a copy of the personal data we hold about you.

• Right to rectification: to have inaccurate data corrected.

• Right to restrict processing: to limit how we use your data in certain circumstances.

• Right to object: to object to processing based on legitimate interests.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Cookies

We use only strictly necessary cookies on this website. We do not use analytics, advertising, or tracking cookies. For more detail, see our Cookie Policy.

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the effective date and the version number above.

10. Contact

For any questions about this privacy policy or your personal data, contact us at dpo@integrity-defence.co.uk.