Legal
Privacy Policy
Last updated 20 September 2026
This policy explains how Gordion Solutions collects, uses and protects the personal data you provide when you use this website, including the details you submit to download our whitepapers and other resources. We are committed to handling your data lawfully, transparently and no more than is necessary.
Who we are
Gordion Solutions is a trading name of Hunter Lola and Co Ltd, a company registered in England and Wales. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), we are the data controller for the personal data described in this policy. You can reach us at info@gordionsolutions.co.uk.
What we collect
When you request a whitepaper or other gated resource, we ask you to provide:
- Your name, work email address, company, and, optionally, your job title.
- Technical details automatically recorded with your request: your IP address, browser user-agent string, and the date and time of submission. We keep these for security, fraud prevention and to evidence how a request was made.
If you contact us by email, we also process the information you choose to include in your message. We do not use advertising or third-party tracking cookies on this site, and the download links we issue are short-lived, single-use tokens rather than persistent identifiers.
If you use the AI Readiness and ask us to email you a PDF of your result, we store your email address and your answers so we can send that PDF. If you also tick the box for the monthly regulator digest, we store your email address for that purpose too, and every digest email includes a one-click unsubscribe link. Nothing from the AI Readiness is shared with third parties.
The Agentic AI Health Check page collects no personal data by itself. If you request a scoping call from it, your enquiry reaches us through the contact form, tagged with its source (from=health-check) so we know which page you came from; the form collects only what you enter.
Why we use it, and our lawful basis
- To provide what you asked for — delivering the document you requested. Lawful basis: performance of a step taken at your request, and your consent.
- To follow up on your enquiry — where you have agreed, contacting you about the resource you downloaded and related Gordion Solutions services. Lawful basis: consent, which you can withdraw at any time, and our legitimate interest in responding to business enquiries.
- To keep our systems secure and accurate — monitoring for misuse and maintaining records. Lawful basis: our legitimate interests.
How it is stored and who can see it
Your details are stored in our own database on infrastructure hosted within the European Economic Area (Amazon Web Services, Ireland). Access is restricted to Gordion Solutions personnel who need it. We do not sell your personal data or share it with third parties for their own marketing. We use a small number of service providers (for example, our cloud hosting provider) who process data on our behalf under appropriate contractual safeguards.
How long we keep it
We keep enquiry and download records for as long as needed to respond to your enquiry and to maintain a reasonable business record, and no longer than necessary. You can ask us to delete your details sooner at any time (see below).
Your rights
Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to our processing, and to data portability. Where we rely on consent, you can withdraw it at any time. To exercise any of these rights, email us at info@gordionsolutions.co.uk and we will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to address your concerns first.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a revised “last updated” date.