Privacy Notice
Last updated: September 2026
1. WHO WE ARE
Invictus Innovations Limited ("Invictus", "we", "us" or "our") is a company registered in England and Wales under company number 14227440.
Invictus Innovations Limited is the data controller responsible for the personal data described in this Privacy Notice.
If you have any questions about this notice or how we use your personal data, please contact:
Email: info@invictusinnovations.co.uk
2. INFORMATION WE MAY COLLECT
We may collect and process personal data including:
• your name, job title and organisation;
• business contact details, including email address and telephone number;
• information you provide when contacting us or making an enquiry;
• information relating to our clients, suppliers, partners and professional contacts;
• information provided in connection with potential contracts, projects or business opportunities;
• information provided by prospective employees, consultants or subcontractors, including CV and professional information;
• correspondence and other communications with us;
• technical information relating to your use of our website, such as IP address, browser type, device information and website usage information; and
• information required for legal, regulatory, security, accounting or contractual purposes.
We aim to collect only the personal data reasonably necessary for the relevant purpose.
3. HOW WE COLLECT PERSONAL DATA
We may obtain personal data:
• directly from you;
• through our website and contact forms;
• through email, telephone or other business communications;
• from clients, suppliers, partners and professional advisers;
• through procurement, tendering and contracting activities;
• from publicly available professional or business sources; and
• through systems and service providers used to operate and secure our business.
4. HOW AND WHY WE USE PERSONAL DATA
We may process personal data for the following purposes:
• Business enquiries and relationships
• To respond to enquiries, communicate with clients and prospective clients, and manage our business relationships.
• Lawful basis: legitimate interests and, where applicable, steps taken before entering into a contract.
• Contracts and service delivery
• To enter into, administer and perform contracts and provide our professional services.
• Lawful basis: performance of a contract, legitimate interests and, where applicable, compliance with legal obligations.
• Suppliers, partners, consultants and subcontractors
• To establish and manage relationships with organisations and individuals supporting the delivery of our services.
• Lawful basis: contractual necessity and legitimate interests.
Procurement and business development
• To participate in procurement exercises, tenders and framework opportunities and to develop legitimate business opportunities.
• Lawful basis: legitimate interests and, where applicable, contractual necessity.
Recruitment and resourcing
• To assess individuals who approach us about employment, consultancy or subcontracting opportunities and to manage associated communications.
• Lawful basis: legitimate interests, steps taken before entering into a contract and, where applicable, legal obligations.
Finance, accounting and administration
• To maintain appropriate financial, contractual and business records and meet our tax, accounting and regulatory obligations.
• Lawful basis: legal obligation, contractual necessity and legitimate interests.
Security
• To protect our systems, information, users and business from unauthorised access, cyber threats, fraud and misuse. Electronic communications and systems may be subject to automated security controls for these purposes.
• Lawful basis: legitimate interests and, where applicable, legal obligations.
Website operation
• To operate, maintain, secure and understand the use of our website.
• Lawful basis: legitimate interests for essential website operation and security. Where consent is required for non-essential cookies or similar technologies, we will seek consent before using them.
5. OUR LEGITIMATE INTERESTS
Where we rely on legitimate interests, those interests may include:
• operating and developing our business;
• communicating with clients and business contacts;
• delivering and improving our professional services;
• managing suppliers, partners and subcontractors;
• pursuing appropriate business opportunities;
• maintaining effective business records; and
• protecting our systems, information and business.
We consider the impact of this processing on individuals and do not rely on legitimate interests where our interests are overridden by an individual's rights and interests.
6. SHARING PERSONAL DATA
We may share personal data where reasonably necessary with:
• clients and prospective clients;
• suppliers, delivery partners and subcontractors;
• professional advisers, including accountants, lawyers and tax advisers;
• IT, communications, hosting and other technology service providers;
• government departments, public authorities, regulators or procurement bodies where required or appropriate;
• law enforcement or other authorities where required by law; and
• other organisations where necessary to establish, exercise or defend legal rights.
We do not sell personal data.
7. INTERNATIONAL TRANSFERS
Some of the technology and service providers we use may process personal data outside the United Kingdom.
Where personal data is transferred internationally, we will ensure that an appropriate legal mechanism or safeguard is used where required by applicable data protection law.
8. HOW LONG WE KEEP PERSONAL DATA
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to meet contractual, legal, accounting, tax, regulatory and security requirements.
Retention periods will vary depending on the nature of the information and our relationship with you.
When personal data is no longer required, we will securely delete it or otherwise dispose of it in accordance with our information management arrangements.
9. INFORMATION SECURITY
We use appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful access, use, alteration, disclosure, loss or destruction.
These measures include appropriate access controls, authentication, device and system security, security monitoring and administrative controls.
However, no electronic transmission or information system can be guaranteed to be completely secure.
10. COOKIES AND WEBSITE TECHNOLOGIES
Our website may use cookies and similar technologies required for its operation, security and functionality.
Where we use non-essential cookies or similar technologies, such as certain analytics technologies, we will provide appropriate information and obtain consent where required.
You can manage your choices through the cookie controls available on our website.
11. YOUR DATA PROTECTION RIGHTS
Depending on the circumstances, UK data protection law gives you rights including:
• the right to be informed about how your personal data is used;
• the right to request access to your personal data;
• the right to request correction of inaccurate or incomplete personal data;
• the right to request erasure of your personal data in certain circumstances;
• the right to request restriction of processing in certain circumstances;
• the right to object to certain processing;
• the right to data portability in certain circumstances; and
• rights relating to certain automated decision-making.
Where we rely on consent, you may withdraw your consent at any time.
These rights do not apply in every circumstance and may be subject to exemptions under applicable law.
To exercise your rights, please contact:
info@invictusinnovations.co.uk
12. RIGHT TO OBJECT
Where we process your personal data on the basis of our legitimate interests, you have the right to object to that processing in certain circumstances.
You also have the right to object at any time to the use of your personal data for direct marketing purposes.
13. COMPLAINTS
If you have concerns about how we use your personal data, please contact us first so that we can try to resolve them.
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Information about how to contact the ICO is available at www.ico.org.uk.
14. THIRD-PARTY WEBSITES
Our website may contain links to websites operated by third parties. We are not responsible for the privacy practices of those websites and recommend reviewing their privacy information separately.
15. CHANGES TO THIS PRIVACY NOTICE
We may update this Privacy Notice from time to time to reflect changes to our business, services, systems or legal obligations.
The latest version will be published on our website with the date it was last updated.
Invictus Innovations Limited
Company number: 14227440
England and Wales