Privacy Policy

Last updated: 9 October 2026

This policy explains how [Legal entity name], trading as Bastion Edge ("we", "us"), processes personal data when you visit bastionedge.eu or contact us. We process personal data in line with the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The data controller is [Legal entity name], [Registered address], registration number [Company registration number]. You can reach us at contact@bastionedge.eu.

2. What we collect

• Contact form and email: your name, work email, company, role (if given) and the content of your message.
• Call bookings: if you book a call, the name, email address, time slot and any answers you give in the scheduler.
• Technical data: our hosting provider automatically records standard server logs (such as IP address, browser type and time of request) to deliver and secure the website.

This website does not set cookies or use analytics or tracking scripts. Fonts are served from our own domain, so no data is sent to third-party font services. The Calendly scheduler loads only when you click "Book a call"; Calendly may then set its own cookies, as described in Calendly's privacy notice.

3. Why we use it and our legal basis

• To respond to your enquiry and take steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To operate and secure this website, which is our legitimate interest (Art. 6(1)(f) GDPR).

We do not sell your data or use it for automated decision-making or profiling.

4. Who we share it with

We use a small number of service providers who process data on our behalf:

• Form handling: Formspree, Inc. (United States), which receives contact form submissions.
• Call scheduling: Calendly, LLC (United States), which manages call bookings.
• Website hosting: Cloudflare, Inc. (United States), which serves the website and processes server logs.
• Email: our email provider, which stores correspondence.

Where a provider transfers data outside the European Economic Area, the transfer is protected by an adequacy decision (such as the EU-US Data Privacy Framework) or by Standard Contractual Clauses.

5. How long we keep it

We keep enquiries for up to 24 months after our last contact with you, unless they lead to an engagement, in which case we keep records for as long as the law requires. Server logs are kept by the hosting provider for a short period, typically no longer than 30 days.

6. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. Where we rely on consent, you can withdraw it at any time. To exercise any of these rights, email contact@bastionedge.eu. We will reply within one month.

You also have the right to lodge a complaint with a supervisory authority, such as [National data protection authority] or the authority in the EU country where you live or work.

7. Security

This website is served only over HTTPS. We limit access to personal data to the people who need it to respond to you.

8. Changes to this policy

We may update this policy. The date at the top shows when it last changed.