Privacy notice
Last updated 4 October 2026
Who we are
Metis (“we”, “us”) is the consultancy at metisandco.com. We decide how the personal data described here is used, which makes us the data controller under the EU General Data Protection Regulation (GDPR). For anything about your data, email privacy@metisandco.com.
What we collect
- When you get in touch: your first and last name, company, position, work email, phone number (optional), the option you choose and your message.
- When you visit the site: anonymous visit statistics from Cloudflare Web Analytics, such as pages viewed, referring site, country and device type. It uses no cookies and does not identify you.
We don’t use advertising or tracking cookies, and we don’t buy or sell personal data.
How we use it, and our legal basis
- To reply to your enquiry and arrange a conversation: based on your consent, which you give with the tick box on the form.
- To follow up on that enquiry and keep a record of it: our legitimate interest in running the business and answering the people who contact us.
- To understand how the site is used and keep it working: our legitimate interest, using anonymous statistics only.
Everything you share with us is confidential, and covered by a strict NDA from the first scoping call.
Who else handles it
Only the providers we use to run the site and respond to you, under contracts that require them to protect it:
- Railway, which hosts the website.
- Cloudflare, for the domain’s DNS and the anonymous site statistics.
- Our customer relationship system, where enquiries are recorded, and our email provider.
Some of these providers process data outside the European Economic Area. Where they do, the transfer is covered by safeguards recognised under GDPR, such as the European Commission’s Standard Contractual Clauses.
How long we keep it
We keep enquiry details for up to 24 months after our last contact with you, then delete them. If we go on to work together, we keep what the engagement needs for as long as the contract and the law require.
Your rights under GDPR
You can ask us, free of charge, to:
- see the personal data we hold about you (access);
- correct it (rectification);
- delete it (erasure);
- limit how we use it (restriction);
- stop using it where we rely on legitimate interests (objection);
- give you a copy in a portable format (portability).
You can also withdraw your consent at any time; this doesn’t affect anything we did before. Email privacy@metisandco.com and we’ll respond within one month.
If you’re unhappy with how we’ve handled your data, you can complain to the Data Protection Commission in Ireland (dataprotection.ie) or to the data protection authority where you live.
Changes
If we change how we handle personal data, we’ll update this notice and the date above.