Privacy & Cookie Policy

1. Who is responsible for your information?

Metis Limited is the controller for personal information processed through metis.gi and for business enquiries addressed to Metis Limited.

Company registration number: 125481 (Companies House Gibraltar).
Registered office: Sovereign Place, 117 Main Street, Gibraltar GX11 1AA.
Privacy contact: office@metis.gi.

References to the company in this policy mean Metis Limited. Applicable data protection rules include the Gibraltar GDPR and the Data Protection Act 2004, as amended.

2. Scope

This policy explains how personal information is handled when you visit the website or contact the relevant company about its business. It covers website operation and business enquiries. Processing carried out under a separate client engagement is subject to the information and contractual arrangements relevant to that engagement.

3. Information collected

When you contact the company by email, the information you provide may include your name, business email address, job title, organisation, message, attachments and any other contact details you choose to include. Email systems also process delivery and security information associated with the correspondence.

When your browser requests a page, technical information is transmitted to the systems that deliver the website. This can include your IP address, date and time, requested page, response status, browser or device information and the referring page, if your browser sends it. Relevant technical records may be generated by the hosting and security systems.

The website has no contact forms, user accounts, advertising tools or audience analytics. Information is normally obtained directly from you or through your browser’s connection. If someone contacts the company on behalf of your organisation, the company may receive your business contact details from that person for the same enquiry.

Please provide only information relevant to your enquiry. Do not include sensitive personal information or details about other people unless this is necessary and you are entitled to share them.

4. Purposes and legal grounds

Business enquiries and correspondence are handled to understand your request, respond to you and manage business relationships. For contacts acting for a company, this is based on the company’s legitimate interests in conducting its business and communicating with prospective or existing business partners.

If you personally request steps before entering a contract with the company, or are personally a party to a contract, information necessary for those steps or that contract is processed on that basis. This contractual ground does not apply solely because you are an employee or representative of a corporate client.

Website delivery, fault investigation and proportionate security measures are based on legitimate interests in keeping the website available, reliable and secure. Records needed to meet applicable legal obligations are processed on that ground. Information necessary for establishing, exercising or defending legal claims may be retained on the basis of the company’s legitimate interests in protecting its legal position.

Providing information by email is voluntary. If the company does not receive sufficient information about your request, it may be unable to respond or take the requested steps. Visiting the website does not require you to submit an enquiry or agree to marketing.

5. Access and disclosure

Information is accessed by people authorised to deal with the relevant enquiry, administer the website or maintain the supporting systems. Hosting, email and security providers may process information to deliver those services. Access is limited to what is needed for the relevant task.

Information may also be disclosed to professional advisers, regulators, courts or public authorities where necessary for advice, compliance with a legal obligation or the establishment, exercise or defence of legal claims. A shared shareholder does not, by itself, authorise access to personal information by another company.

6. Providers and international transfers

Hosting and email services may involve processing in countries other than Gibraltar, including remote access by support staff. A restricted transfer requires a valid mechanism under applicable data protection law.

7. Retention

Enquiry records are kept while the enquiry is active and for a period afterwards determined by whether further correspondence is reasonably expected, whether the enquiry leads to an engagement and whether the record is needed to resolve a complaint or protect a legal claim. Irrelevant or duplicate information is removed when it is no longer needed.

Technical records are kept for the period needed to operate the website, investigate faults and address security incidents. If a specific record is required for an incident investigation or a legal obligation, that record may need to be retained for longer than routine logs.

If an enquiry becomes a client engagement, records needed for that relationship are retained under the arrangements and legal obligations applicable to it. The company reviews the continuing need for personal information and deletes or anonymises it when that need ends.

8. Your rights

Subject to the conditions and exceptions in applicable law, you may ask for access to your personal information, correction of inaccurate information, erasure or restriction of processing. Data portability may apply where processing is automated and based on your consent or a contract with you.

Right to object: You may object to processing based on legitimate interests for reasons relating to your particular situation. The company will consider your objection under the applicable rules.

Where any processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. The website does not require consent to optional cookies because it does not use them.

To exercise your rights, contact the relevant company using the details in this policy. It may need proportionate information to confirm your identity and identify the records concerned. These rights are not absolute and may be limited by applicable law or the rights of others.

9. Cookies and similar technologies

Cookies are small files stored on your device. Similar technologies can store information or access information on your device in other ways.

This information-only website does not use advertising or analytics cookies, tracking pixels or other optional tracking technologies. It has no contact forms or embedded third-party media. Fonts are hosted locally. Normal technical handling of a page request and any server-side logs are described above; these are not cookies stored in your browser.

There are no optional cookies to accept or reject. Your browser also allows you to manage stored website information. If the website later introduces cookies or similar technologies, this section will be updated and any required information or consent controls will be provided before those technologies are used.

10. External links and decisions

Links to another company or website take you to a separate service with its own privacy arrangements. No information is deliberately transferred to the linked company merely because its name appears on this website; following a link causes your browser to connect to the destination and may send a referrer, depending on your browser settings.

The website does not make solely automated decisions about you with legal or similarly significant effects and does not use visitor information for such profiling.

11. Contact and complaints

For privacy questions, rights requests or concerns, contact Metis Limited at office@metis.gi, or write to its registered office at Sovereign Place, 117 Main Street, Gibraltar GX11 1AA.

You may also raise a complaint with the Gibraltar Regulatory Authority, acting as the Information Commissioner. Guidance on making a complaint is available at GRA – Data Protection Complaints. You do not have to give up your right to contact the competent regulator by contacting the company first. Other supervisory authorities may be relevant where applicable law provides for this.

12. Changes

This policy will be reviewed when the website, its providers or the way personal information is handled changes. The current version will be available on the website, with its update date.