Legal

Privacy policy

Last updated: 19 October 2026

This policy explains how Mithos Limited ("we", "us") handles personal data collected through this website. We are a company registered in England and Wales (company no. 17459676) with our registered office at 9 Crake Valley Road, Harwell, Oxford, OX11 6LS. We are the data controller and are registered with the Information Commissioner's Office (ICO), reference ZC249870.

Who to contact

For any question about this policy or your personal data, email info@mithos.co.uk.

What we collect

When you use our contact form we collect:

  • your name and email address
  • your company name
  • your phone number (optional)
  • the service you are interested in
  • the contents of your message

Enquiries sent through the form are emailed to us and also saved in our database so we can follow them up. If you email us directly we will also hold your email address and the content of the correspondence. We do not collect payment details through this website.

Website usage

We count page views without cookies. For each visit we record the page, the website you came from, your country, your device type (mobile, tablet or desktop) and the time. We do not store your IP address, browser details or any identifier, so this data cannot tell us who you are.

Business contacts we may email

We keep details of businesses we may contact about our services: the company name and number and, where relevant, a contact's name, job title and work email address. We take these from public business sources such as Companies House and from information businesses publish about themselves. We use an AI tool to help draft emails from the company details. We read and edit every email and send it ourselves, and nothing is sent automatically.

How and why we use it

We use your details only to respond to your enquiry, to discuss and, if you go ahead, deliver our services, and to keep a record of our dealings with you. Our lawful basis is taking steps at your request before entering into a contract and our legitimate interests in running and growing a consultancy business. We do not use your details for automated decision-making, and we never sell your data.

For business contacts, our lawful basis is our legitimate interest in finding new clients. We aim to email businesses such as limited companies rather than private individuals, every email says who we are and how to opt out, and if you tell us not to contact you we keep your details on a suppression list so that we honour your request.

We will only send you marketing emails if you have asked us to or where the law otherwise allows, and you can opt out at any time.

Who we share it with

We share personal data only with service providers that help us run the website and handle email (for example hosting, email delivery, database and AI drafting providers), who may only act on our instructions. We may also disclose data where required by law. We do not share your data with third parties for their own marketing.

International transfers

Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework, or a UK adequacy decision.

How long we keep it

Enquiries that do not lead to work are kept for up to 24 months and then deleted. Business contact records are kept while they are relevant and deleted on request, apart from suppression list entries, which we keep so that we continue to honour a request not to be contacted. If you become a client, we keep records for as long as needed to deliver our services and meet our legal and accounting obligations (normally six years after the end of our engagement). You can ask us to delete your enquiry sooner.

Your rights

Under UK data protection law you can ask us to access, correct, delete or restrict the use of your personal data, to object to its use, and to receive a copy in a portable format. You can also object at any time to us contacting you about our services. To exercise any of these rights, email info@mithos.co.uk. We will respond within one month.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to the ICO at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Security

We use appropriate technical and organisational measures to protect personal data, and limit access to those who need it.

Cookies and links

See our cookie notice for how this website uses cookies. This website links to third-party sites such as LinkedIn, which have their own privacy policies and are not covered by this one.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.