Privacy & Cookie Policy
Last updated: 23 March 2026
1. Who We Are
Exos Systems Limited ("Exos", "we", "us", "our") is a telecom BSS consulting and software delivery company registered in Guernsey, Channel Islands. We provide BSS delivery, integration, billing modernisation, and AI-native advisory services to communications service providers worldwide.
Data Controller: Exos Systems Limited
Contact: info@exos-systems.com
2. What Data We Collect
We collect personal data only when you voluntarily provide it. This includes:
- Contact form submissions: name, email address, company name, phone number (optional), and your message
- Email correspondence: when you contact us directly via email
- Business enquiries: details provided during consultation requests, demo bookings, or partnership discussions
We do not collect personal data passively through tracking pixels, advertising cookies, or third-party analytics on this website.
3. How We Use Your Data
We use the personal data you provide to:
- Respond to your enquiries and provide requested information
- Arrange consultations, demonstrations, or meetings
- Deliver our professional services under contract
- Send relevant communications about our services (only with your consent)
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Legal Basis for Processing
Under the Data Protection (Bailiwick of Guernsey) Law, 2017 and the EU General Data Protection Regulation (GDPR), we process your data on the following legal bases:
- Consent: when you submit a contact form or opt in to communications
- Legitimate interest: to respond to business enquiries and improve our services
- Contractual necessity: to deliver services you have engaged us to provide
5. Cookies & Local Storage
This website uses minimal browser storage:
| Name | Type | Purpose | Duration |
|---|---|---|---|
exos-theme |
localStorage | Remembers your light/dark display preference | Until cleared |
exos-cookie-consent |
localStorage | Records your cookie consent choice | Until cleared |
PHPSESSID |
Session cookie | Admin authentication only (not set for public visitors) | Browser session |
We do not use:
- Google Analytics or other tracking/analytics cookies
- Advertising or remarketing cookies
- Third-party social media tracking pixels
If we introduce analytics or third-party cookies in the future, they will only be activated after you provide explicit consent via our cookie banner.
6. Data Sharing
We may share your data with:
- Hosting providers: our website is hosted on secure servers; providers act as data processors under contract
- Professional advisors: legal or financial advisors where necessary
- Legal requirements: where required by law or to protect our legal rights
We do not transfer personal data outside the European Economic Area (EEA) or the Bailiwick of Guernsey without appropriate safeguards.
7. Data Retention
We retain personal data only for as long as necessary:
- Contact form submissions: 24 months from submission, unless an ongoing business relationship is established
- Client project data: for the duration of the engagement plus 6 years (as required for contractual and tax purposes)
- Marketing consent records: until consent is withdrawn
8. Your Rights
Under applicable data protection law, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten")
- Restrict processing of your data
- Object to processing based on legitimate interest
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time (without affecting prior lawful processing)
To exercise any of these rights, contact us at info@exos-systems.com. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- ISO/IEC 27001:2022 certified delivery controls
- HTTPS encryption on all web traffic
- Access controls and authentication for all systems
- Regular security reviews
10. Supervisory Authority
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with:
Office of the Data Protection Authority (ODPA)
St Martin's House, Le Bordage, St Peter Port, Guernsey, GY1 1BR
Website: www.odpa.gg
Email: enquiries@odpa.gg
For individuals in the EU, you may also contact your local data protection authority.
11. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.
12. Contact Us
For any questions about this policy or your personal data:
Exos Systems Limited
Email: info@exos-systems.com
Website: Contact page