Privacy Policy

Last updated: 19 May 2026

Introduction

Welcome to Xvaro Ltd (“Xvaro”, “we”, “our”, us”).

We are committed to protecting your privacy and handling your personal information transparently and securely. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, contact us, or engage with our services.

We process personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and other applicable privacy laws.

By using our website, you acknowledge the practices described in this Privacy Policy.

Company Information

Xvaro Ltd is a company registered in England and Wales under company number 14234586.

Registered office:

Malvern Lodge Common Road
Shelfanger
Diss
Norfolk
IP22 2DP

If you have any questions regarding this Privacy Notice or how we process your personal information, please contact us at:

Email: contact@xvaro.co.uk

The Information We Collect

We may collect and process personal information including:

Name
Job title
Company name
Email address
Telephone number
Information submitted through our website forms
Communications and correspondence with us
Technical and usage information relating to your use of our website

We may also collect information automatically through cookies and analytics technologies, including:

IP address
Browser type and version
Device information
Pages visited
Time spent on our website
Referral sources

How We Use Personal Information.

We may use personal information to:

Respond to enquiries and requests
Provide consultancy and advisory services
Manage client and supplier relationships
Arrange meetings and consultations
Improve our website and services
Maintain website security and integrity
Comply with legal and regulatory obligations
Send relevant business communications where appropriate

We will only process personal information where we have a lawful basis to do so.

Legal Basis for Processing

We process personal data under one or more of the following lawful bases:

Legitimate Interests

We may process personal information where it is necessary for our legitimate business interests, including operating our business, responding to enquiries, improving services, and maintaining relationships with clients and prospective clients.

Contractual Necessity

Where processing is necessary to perform a contract or take steps prior to entering into a contract.

Legal Obligations

Where processing is required to comply with applicable legal or regulatory obligations.

Consent

Where required, we will obtain consent before processing personal information for specific purposes such as marketing communications. Consent may be withdrawn at any time.

Sharing Personal Information

We do not sell personal information to third parties.

We may share personal information with trusted third-party service providers who support our business operations, including providers of:

Website hosting
IT support
Cloud storage
Email and communication systems
Analytics services
Professional advisory services

Third parties are required to process personal data securely and only for authorised purposes.

We may also disclose information where required by law or where necessary to establish, exercise, or defend legal claims.

International Data Transfers

Where personal information is transferred outside the United Kingdom, we take appropriate measures to ensure it remains protected and processed in accordance with applicable data protection laws.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, regulatory, tax, accounting, or reporting requirements.

Cookies and Website Analytics

Our website may use cookies and similar technologies to improve functionality, analyse website usage, and enhance user experience.

Cookies are small text files stored on your device when you visit a website.

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain areas of our website.

Your Rights

Under applicable data protection laws, you may have rights including:

The right to access personal information
The right to correct inaccurate information
The right to request deletion of personal information
The right to restrict or object to processing
The right to data portability
The right to withdraw consent where processing is based on consent
The right to lodge a complaint with the Information Commissioner’s Office (“ICO”)

Further information about your rights is available from the Information Commissioner’s Office

Security

We maintain appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, disclosure, or alteration.

While we take reasonable steps to protect information, no method of electronic transmission or storage can be guaranteed as completely secure.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites and encourage users to review the relevant privacy notices separately.

Changes to This Privacy Notice

We may update this Privacy Notice periodically to reflect changes in legal, regulatory, or business requirements. Any updates will be published on this page.