Neol Privacy Policy

Last updated: July 9, 2025

At Neol Ltd. (“Neol”, “we”, “our”, “us”), we take your privacy seriously. This policy explains what personal data we collect, why we collect it, and how we handle it—always in line with UK data protection laws.

1. Who we are and how to contact us

Neol Ltd

C/O Las Accountants LLP

No. 1 Royal Exchange

London, EC3V 3DG

Email: info@neol.co

Supervisory authority: Information Commissioner’s Office (ICO)

We are the data controller for any personal data we collect via www.neol.co (“Website”) and related services.

2. What data we collect and why

We collect personal data in the following ways:

Category	Examples	Why we collect it	Legal basis
Account & contact info	Name, email, password, company, job title, social media, photo	To create and manage your profile	Contract
Marketing & preferences	Newsletter opt-ins, form responses	To send relevant updates and improve engagement	Consent
Analytics data	IP address, device type, location (city-level), pages visited	To understand how users use the Website	Consent (via cookie banner)
Session data	Login state, CSRF tokens	To keep your session secure	Legitimate interest
Third-party embed interactions	Interactions with Calendars, Fonts, Video content	To enhance your experience	Consent / Legitimate interest

We do not collect or store payment data directly.

3. How we use and share your data

We only use your data for the purposes listed above. Where necessary, we use trusted third-party providers to help us operate the Website.

We use the following services:

Service	Purpose	Location	Notes
Auth0	Secure login & identity management	US/EU	Privacy Shield not valid; SCCs in place
Google Analytics	Website usage analysis	EU/US	Consent-based tracking
Microsoft Clarity	Heatmaps & session analytics	EU/US	Consent-based tracking
Webflow	Website hosting & frontend CMS	US	Essential infrastructure
HubSpot	CRM, forms, marketing comms	EU/US	Consent-based for marketing
Airtable	Data collaboration & project tracking	US	Business operations
MongoDB Cloud	Backend data storage	Germany	Encrypted and secured
Make (Celonis)	Automation & integrations	US	Data flow managed securely

We only share your personal data with these partners under legally appropriate agreements (e.g. Standard Contractual Clauses where required).

4. International transfers

Some of our partners are based outside the UK or EEA (especially in the US). Where this happens, we ensure your rights are protected through legal safeguards such as:

Standard Contractual Clauses (SCCs)
Vendor-specific Data Processing Agreements (DPAs)
Encryption and strict access controls

You can request a copy of these safeguards by contacting info@neol.co.

5. How long we keep your data

We retain personal data only as long as necessary for the purpose it was collected:

Account data: as long as your profile is active
Marketing data: until you withdraw consent
Analytics data: up to 26 months (Google Analytics default)
Session data: during active use or short duration thereafter

After this, we delete or anonymize your data securely.

6. Your rights under UK GDPR

You have the right to:

Access your data
Correct inaccurate data
Delete your data (“right to be forgotten”)
Object to certain processing (e.g. direct marketing)
Withdraw consent at any time
Port your data to another provider
Complain to the ICO if you believe your data has been mishandled

To exercise any of these rights, email info@neol.co. We will respond within 30 days.

7. Cookies and tracking

We use cookies and similar technologies to:

Provide essential functionality (e.g. login)
Measure usage (Google Analytics, Clarity)
Manage marketing preferences (HubSpot)

Please see our Cookie Policy, found on the next tab above this page, for full details, including how to manage or withdraw your consent.

8. Changes to this policy

We may update this policy from time to time to reflect changes in technology or law. When we do, we will update the “Effective Date” and notify you if changes are material.