Privacy & Cookie Policy

1. Who We Are

Exos Systems Limited ("Exos", "we", "us", "our") is a telecom BSS consulting and software delivery company registered in Guernsey, Channel Islands. We provide BSS delivery, integration, billing modernisation, and AI-native advisory services to communications service providers worldwide.

Data Controller: Exos Systems Limited
Contact: info@exos-systems.com

2. What Data We Collect

We collect personal data only when you voluntarily provide it. This includes:

• Contact form submissions: name, email address, company name, phone number (optional), and your message
• Email correspondence: when you contact us directly via email
• Business enquiries: details provided during consultation requests, demo bookings, or partnership discussions

We do not collect personal data passively through tracking pixels, advertising cookies, or third-party analytics on this website.

3. How We Use Your Data

We use the personal data you provide to:

• Respond to your enquiries and provide requested information
• Arrange consultations, demonstrations, or meetings
• Deliver our professional services under contract
• Send relevant communications about our services (only with your consent)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

Under the Data Protection (Bailiwick of Guernsey) Law, 2017 and the EU General Data Protection Regulation (GDPR), we process your data on the following legal bases:

• Consent: when you submit a contact form or opt in to communications
• Legitimate interest: to respond to business enquiries and improve our services
• Contractual necessity: to deliver services you have engaged us to provide

5. Cookies & Local Storage

This website uses minimal browser storage:

Name	Type	Purpose	Duration
exos-theme	localStorage	Remembers your light/dark display preference	Until cleared
exos-cookie-consent	localStorage	Records your cookie consent choice	Until cleared
PHPSESSID	Session cookie	Admin authentication only (not set for public visitors)	Browser session

We do not use:

• Google Analytics or other tracking/analytics cookies
• Advertising or remarketing cookies
• Third-party social media tracking pixels

If we introduce analytics or third-party cookies in the future, they will only be activated after you provide explicit consent via our cookie banner.

6. Data Sharing

We may share your data with:

• Hosting providers: our website is hosted on secure servers; providers act as data processors under contract
• Professional advisors: legal or financial advisors where necessary
• Legal requirements: where required by law or to protect our legal rights

We do not transfer personal data outside the European Economic Area (EEA) or the Bailiwick of Guernsey without appropriate safeguards.

7. Data Retention

We retain personal data only for as long as necessary:

• Contact form submissions: 24 months from submission, unless an ongoing business relationship is established
• Client project data: for the duration of the engagement plus 6 years (as required for contractual and tax purposes)
• Marketing consent records: until consent is withdrawn

8. Your Rights

Under applicable data protection law, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict processing of your data
• Object to processing based on legitimate interest
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time (without affecting prior lawful processing)

To exercise any of these rights, contact us at info@exos-systems.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• ISO/IEC 27001:2022 certified delivery controls
• HTTPS encryption on all web traffic
• Access controls and authentication for all systems
• Regular security reviews

10. Supervisory Authority

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with:

Office of the Data Protection Authority (ODPA)
St Martin's House, Le Bordage, St Peter Port, Guernsey, GY1 1BR
Website: www.odpa.gg
Email: enquiries@odpa.gg

For individuals in the EU, you may also contact your local data protection authority.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

12. Contact Us

For any questions about this policy or your personal data:

Exos Systems Limited
Email: info@exos-systems.com
Website: Contact page