Last Updated: April 3, 2024

Privacy Policy

Privacy Notice

Thayon Ltd 20 Wenlock Road, London, N1 7GU, England Company Registration No: 15919823 | VAT No: 476859816 ICO Registration Reference: ZB819711

Last updated: 24 May 2026

Introduction

This privacy notice explains how Thayon Ltd ("Thayon", "we", "us", "our") collects, uses, stores, and protects your personal data, and sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are registered with the Information Commissioner's Office (ICO) under reference ZB819711. We take your privacy seriously and are committed to handling your personal data responsibly and transparently.

1. Who This Privacy Notice Applies To

This notice applies to:

Individuals who book a call with us via Calendly (prospective clients, employers, or candidates)

Visitors to our website at thayon.com

Representatives of organisations who contact or engage with us in connection with our recruitment services

2. Data Controller

The Data Controller responsible for your personal data is:

Thayon Ltd 20 Wenlock Road, London, N1 7GU, England Company Registration No: 15919823

For any questions or requests relating to this notice or to your personal data, please contact us at: joe@thayon.com

3. Information We Collect

The only personal data collected through this website is via Calendly, a third-party scheduling platform. This occurs when you voluntarily choose to book a call with us.

When you complete a Calendly booking, the information collected may include:

Your name

Your email address

Any additional details you choose to provide (e.g. company name, job title, notes about your requirements)

Your selected date and time for the call

Scheduling and calendar metadata managed by Calendly

We do not operate any contact forms, newsletter sign-ups, account registrations, or other data collection mechanisms on this website. We do not collect any special categories of personal data (such as health, ethnicity, or religious belief) through our website.

In the course of providing our recruitment services following an initial call, we may separately collect additional professional information from you (such as your CV, employment history, and career preferences) where you have engaged with us directly. Such processing will be covered by a separate notice or agreement provided at that time.

4. How We Use the Information We Collect

We use the personal data collected via Calendly for the following purposes:

To confirm and manage your scheduled call or meeting

To respond to your enquiry and follow up in connection with our recruitment services

To assess whether and how Thayon can assist you, whether as a client, candidate, or otherwise

To manage our business relationship with you

We do not use your data for automated decision-making or profiling. We do not use your data for unsolicited marketing without your consent.

5. Legal Basis for Processing

All processing of your personal data is carried out on one or more of the following lawful bases under UK GDPR:

Legitimate Interests (Article 6(1)(f)): We have a legitimate interest in using your data to respond to enquiries made by you, to manage bookings, and to operate our recruitment business. We have assessed that this interest is not overridden by your rights and interests given the voluntary nature of the booking.

Performance of a Contract or Pre-Contractual Steps (Article 6(1)(b)): Where your booking relates to entering into a working relationship or engagement with Thayon, processing is necessary to take steps at your request prior to entering into a contract.

Consent (Article 6(1)(a)): Where you have provided your explicit consent for a specific purpose (for example, for us to contact you about future opportunities), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Legitimate Interests

Where we rely on legitimate interests as our lawful basis, those interests include:

Responding to and managing enquiries and bookings made by individuals who have actively sought contact with us

Operating and improving our recruitment services

Preventing fraud and maintaining the security of our systems

We ensure that in pursuing these interests, we give due regard to your rights and take them into account. You have the right to object to processing carried out on this basis (see Section 10).

7. Third-Party Services: Calendly

Booking functionality on this website is provided by Calendly LLC, a US-based scheduling platform. When you initiate a booking, you interact directly with Calendly's systems and their own privacy policy applies to the data they collect and process. We encourage you to read Calendly's privacy policy at calendly.com/privacy.

Calendly may process your data outside of the UK. Where this occurs, Calendly relies on appropriate transfer mechanisms, including Standard Contractual Clauses (SCCs), to ensure your data is adequately protected in line with UK GDPR requirements.

Thayon receives a copy of your information except as necessary to provide the scheduling service on our behalf.

8. Information We Disclose

We do not sell or rent your personal data to third parties. We may disclose your personal data only in the following limited circumstances:

To Calendly, as described above, solely to facilitate your booking

To prospective employers or clients, only where you have engaged with us as a candidate and have given your explicit consent for us to put you forward

To professional advisers (e.g. legal or accounting advisers) where necessary in connection with running our business, subject to appropriate confidentiality obligations

Where required by law, including to comply with a legal obligation, court order, or lawful request from a regulatory or law enforcement authority

In connection with a business transfer, in the event of a sale, merger, or restructuring of Thayon, where personal data may be transferred as part of that transaction. We will notify you in advance where this is the case.

9. Data Transfers

Your personal data may be transferred to and processed in countries outside the UK, specifically in connection with Calendly's US-based infrastructure. Such transfers are carried out in compliance with UK GDPR, relying on Standard Contractual Clauses or other lawful transfer mechanisms to ensure your data receives an equivalent level of protection.

10. Your Rights as a Data Subject

Under UK GDPR (Articles 15–22), you have the following rights:

Right of Access: You have the right to request a copy of the personal data we hold about you and information about how it is processed.

Right to Rectification: You have the right to request correction of any inaccurate or incomplete data we hold about you.

Right to Erasure: You have the right to request deletion of your personal data where there is no compelling reason for us to continue processing it.

Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances (e.g. while accuracy is contested).

Right to Data Portability: You have the right to receive personal data you have provided to us in a structured, commonly used, machine-readable format, and to request its transfer to another controller where technically feasible.

Right to Object: You have the right to object at any time to processing based on our legitimate interests. We will stop processing unless we can demonstrate compelling legitimate interests, rights, and freedoms.

Right Not to Be Subject to Automated Decision-Making: You have the right not to be subject to decisions made solely by automated means that have a legal or similarly significant effect on you. We do not carry out any such processing.

Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at joe@thayon.com. We will respond within one calendar month of receiving your request, in line with UK GDPR requirements. We will not charge a fee for reasonable requests.

11. Right to Lodge a Complaint

If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Website: ico.org.uk Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO. Please reach out to us at joe@thayon.com in the first instance.

12. How We Protect Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include restricting access to personal data to authorised personnel only and using secure communication channels.

13. How Long We Store Your Data

We retain your personal data only for as long as is necessary for the purposes described in this notice, and in compliance with applicable legal and regulatory retention obligations.

As a general guide, booking and contact information collected via Calendly is retained for up to 2 years from the date of your last interaction with us, unless a longer period is required by law or where an ongoing engagement with you necessitates it.

Where we have no legitimate reason to retain your data beyond this period, we will securely delete or anonymise it.

14. Cookies and Website Technology

Our website is built and hosted using Framer. Framer may use technically necessary cookies or similar technologies to ensure the website functions correctly. We do not use advertising, tracking, or behavioural analytics cookies beyond what is strictly necessary for site operation.

If our use of cookies changes materially in the future, this notice will be updated and, where required by law, we will seek your consent.

15. Links to Third-Party Websites

Our website contains links to external websites (including Calendly and LinkedIn) operated by organisations not affiliated with Thayon. This privacy notice applies solely to data collected by Thayon. We encourage you to review the privacy policies of any third-party sites you visit.

16. Updates to This Privacy Notice

We may update this privacy notice from time to time to reflect changes in our practices or legal requirements. Any changes will be published on this page with an updated "Last updated" date at the top. We encourage you to review this notice periodically.