Privacy Policy

Last updated: 19 June 2026

1. Introduction

Exyon Software ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website (exyon.co.uk) and services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller and Processor Roles

For this website and our own contact, enquiry and marketing activities, Exyon Software is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

  • Email: [email protected]
  • Registered/Trading Address: Exyon Ltd, Office 1, Izabella House, 24-26 Regent Place, City Centre, Birmingham, B1 3NJ

Our Pulse platform. Where a training provider uses our Pulse learning platform to deliver training, the training provider is the data controller of the learner records processed through it (enrolment, progress, assessment, support and funding data), and Exyon Ltd acts as a data processoron that provider's documented instructions under a UK GDPR Article 28 agreement. This Privacy Policy covers our website-visitor data; if you are a learner, please refer to the privacy information provided within the Pulse platform and by your training provider for how your learning data is handled.

3. Information We Collect

We may collect and process the following types of personal data:

3.1 Information You Provide

  • Name and contact details (email address, phone number)
  • Company or organisation name
  • Job title or role
  • Messages and enquiries submitted through our contact forms
  • Demo request information

3.2 Information Collected Automatically

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent on our website
  • Referring website

4. Lawful Basis for Processing

We process your personal data under the following lawful bases:

  • Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
  • Contract: Where processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
  • Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

5. How We Use Your Information

We use your personal data to:

  • Respond to your enquiries and provide customer support
  • Process demo requests and provide information about our products
  • Send you relevant marketing communications (with your consent)
  • Improve our website and services
  • Comply with legal obligations
  • Protect against fraud and ensure the security of our services

6. Data Sharing

We do not sell your personal data. We may share your data with:

  • Service Providers: Third-party companies that help us operate our business, each contractually bound to protect your data under UK GDPR Article 28 — including Hostinger (website and platform hosting, UK) and Brevo (transactional email).
  • Legal Requirements: Where required by law, regulation, or legal process.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

For AI-assisted features within the Pulse platform, we use Google Cloud (Vertex AI) as a sub-processor, with processing carried out in the United Kingdom (theeurope-west2 region) by default. In the event we ever need to use a provider outside the UK, we put in place an appropriate safeguard required by UK GDPR (such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses). These features are human-reviewed and do not make solely automated decisions about learners.

7. International Transfers

Your personal data is primarily stored and processed within the United Kingdom. If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or transfers to countries with adequate data protection laws.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context of our relationship with you.

9. Your Rights

Under UK GDPR, you have the following rights:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request that we correct inaccurate or incomplete data.
  • Right to Erasure: You can request that we delete your personal data in certain circumstances.
  • Right to Restrict Processing: You can request that we limit how we use your data.
  • Right to Data Portability: You can request a copy of your data in a machine-readable format.
  • Right to Object: You can object to our processing of your data in certain circumstances.
  • Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

10. Cookies

Our website uses essential cookies to ensure proper functionality. We may also use analytics cookies to understand how visitors use our website. You can control cookie preferences through your browser settings.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure hosting, and access controls.

12. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Complaints

If you have concerns about how we handle your personal data, please contact us first at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: