Last updated: 23 September 2026
This policy explains what personal data Severus collects through severus.co, why we collect it, who we share it with and what rights you have. We keep it short and only collect what we need to answer you and run the site.
Who we are
Severus (“we”, “us”) is the controller of the personal data described here. We work from offices in London (4 Queen’s Road, London SW19 8ND, United Kingdom) and Tallinn (Kaupmehe 7–120, Kesklinn, Tallinn 10114, Estonia).
For anything about your data, email olena.bochulia@severus.co.
What we collect and why
When you contact us
The contact form asks for your full name, company, email address and the details of your request. We use them to reply, to prepare a proposal if you ask for one and to keep a record of our conversation. The same applies if you email us directly.
Our legal basis is our legitimate interest in answering enquiries and, where you ask about our services, taking steps at your request before entering into a contract.
When you book a call
Calls are scheduled through Calendly, which opens inside our site. Calendly collects the name, email address and any answers you give when booking, and shares them with us so we can hold the call. We also pass Calendly the page you booked from, so we know which part of the site brought you to us.
Calendly processes this data under its own privacy notice. Our legal basis is the same as for the contact form.
Spam protection
The contact form is protected by Google reCAPTCHA, which checks that a person, not a bot, is submitting it. To do so it collects technical information such as your IP address and how you interact with the page, and sends it to Google. Google’s privacy policy and terms apply. Our legal basis is our legitimate interest in keeping the site secure and free of spam.
Technical data
Like any website, our server records basic technical information when you visit: your IP address, browser type, the pages you request and the time of the request. We use it only to run and secure the site.
Cookies
We use strictly necessary cookies to make the site work and to remember your cookie choices. Any other cookies, such as analytics, are set only if you agree to them in the cookie banner. You can change your choice at any time from the cookie settings link on the site.
Calendly and Google reCAPTCHA may set their own cookies when their features load.
Who we share data with
We do not sell your personal data. We share it only with the service providers that help us run the site and our business, and only as far as they need it:
- our website hosting provider, which stores the site and the enquiries sent through it;
- our email provider, which delivers enquiries and our replies;
- Calendly, for scheduling calls;
- Google, for reCAPTCHA spam protection.
We may also disclose data where the law requires it, or to protect our rights.
International transfers
Some of these providers, including Calendly and Google, process data in the United States. Where data leaves the UK or the European Economic Area, we rely on adequacy decisions (such as the EU–US Data Privacy Framework and its UK extension) or on the standard contractual clauses approved by the European Commission and the UK authorities.
How long we keep it
We keep enquiries and booking details for up to 24 months after our last contact with you. If you become a client, we keep the data for as long as we work together and afterwards for as long as accounting and legal obligations require. Server logs are kept for a short period for security purposes and then deleted.
Your rights
Under the UK GDPR and the EU GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it, including where we rely on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email olena.bochulia@severus.co. We will reply within one month.
You can also complain to a data protection authority: in the UK, the Information Commissioner’s Office; in Estonia, the Data Protection Inspectorate; or the authority where you live. We would appreciate the chance to resolve your concern first.
Security
The site is served over an encrypted connection, and access to enquiries is limited to the people who need it to reply. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data.
Links to other sites
Our site links to other websites, such as LinkedIn. We are not responsible for how they handle your data; please read their privacy policies.
Children
Our services are for businesses. We do not knowingly collect data from anyone under 16.
Changes to this policy
We may update this policy when our site or services change. The date at the top shows when it was last revised.