Privacy notice

Last updated 8 October 2026.

This notice explains what personal information we collect through this website, why we collect it, how we keep it, and the rights you have over it. It is written to meet the UK General Data Protection Regulation and the Data Protection Act 2018, following the Information Commissioner’s Office guidance on the right to be informed.

Who we are

INDEX is a trading name of Cliext Ltd, a private limited company registered in Northern Ireland, company number NI737239. Our registered office is Unit A, 39 Ballygowan Road, Kells, Ballymena BT42 3PD. Cliext Ltd is the controller of the personal information described in this notice.

You can contact us about anything in this notice at privacy@index.aero, or by post at the address above. Legal notices for the company go to legal@index.aero. We are not required to appoint a data protection officer and have not done so; questions about personal information are handled by the company’s director.

What information we collect, and how we get it

Most of the personal information we hold comes directly from you, when you write to us.

When you email us. We receive your name, your email address, the name of your organisation if you give it, and whatever you write in the message. If you write on behalf of an organisation, we may also keep your role and the organisation’s contact details.

When you book an introduction call. The booking page is provided by Cal.com and opens on Cal.com’s site, separately from ours. It asks for your name, your email address and the questions we set: your organisation, what kind of organisation it is, your role, and anything you want to tell us before the call. Cal.com processes the booking under its own privacy policy and passes the details to us so we can hold the call, which takes place by video link.

When you visit the site. Our hosting provider, Vercel, records technical information that every website receives when a page is requested: the address your device connects from, the browser and device type, the pages requested, and the time. We use this only to keep the site secure and working. We do not use it to identify you.

What we do not collect. This site itself has no forms, no accounts and no payments, and it does not use cookies, analytics or tracking of any kind. The booking page is Cal.com’s, opens separately, and is covered by Cal.com’s own notice. If any of this changes, we will update this notice first and, where the law requires it, ask for your consent before anything is set.

We do not knowingly collect information from anyone under 16. The site is for organisations and the people who run them.

Why we use your information, and the lawful basis

Data protection law requires a lawful basis for each use of personal information. Ours are:

To reply to you and to continue a conversation you started. Lawful basis: our legitimate interest in answering the people who write to us, and, where you are asking about working with us, taking steps at your request before any agreement.
To arrange and hold an introduction call you booked. Lawful basis: taking steps at your request before any agreement, and our legitimate interest in meeting the organisations that may work with us.
To keep a record of our correspondence. Lawful basis: our legitimate interest in knowing what we have said to whom, so we can be consistent and accountable.
To keep the website secure. Lawful basis: our legitimate interest in preventing misuse of the site and protecting it from attack.
To send you updates about INDEX. We will only do this if you ask us to. Lawful basis: your consent, which you can withdraw at any time by replying to any message or writing to privacy@index.aero.

When we rely on legitimate interests we have considered whether those interests are outweighed by your rights and freedoms. For a website that receives email and keeps technical logs, we are satisfied that they are not. You can ask us for the details of that assessment.

We do not use your information to make automated decisions about you, and we do not profile you.

Who we share it with

We do not sell personal information, and we do not share it for anyone else’s marketing. The companies that handle information on our behalf are:

Google LLC, which provides our email through Google Workspace and stores and delivers the messages you send us and we send you.
Vercel Inc., which hosts and serves the website and keeps the technical logs described above.
Cal.com, Inc., which provides the appointment scheduling for introduction calls, together with the video service the booking page names for the call itself.

Each of them processes personal information on our instructions under its published data-processing terms. All three are based in the United States, so your information may be transferred outside the United Kingdom. Those transfers are protected either by the UK extension to the EU-US Data Privacy Framework, where the provider is certified, or by the International Data Transfer Agreement or Addendum approved by the Information Commissioner’s Office. You can ask us for a copy of the safeguards that apply.

We will disclose personal information if the law requires it, for example to a court or a regulator.

How long we keep it

Correspondence: for two years after our last exchange with you, unless we go on to work together, in which case we keep it for as long as that relationship lasts and for six years afterwards, which is the period needed for legal and accounting purposes.
Call bookings: the details you give when booking are kept with our correspondence for the same period; the calendar entry itself is deleted after the call.
Technical logs: for the short period set by Vercel, which is measured in days or weeks, after which they are deleted automatically.
Consent to updates: until you withdraw it, or until we stop sending updates.

When information is no longer needed we delete it or make it anonymous.

Your rights

Under data protection law you have rights over the information we hold about you. You do not have to pay to use them, and we will respond within one month.

Access: you can ask us for a copy of the personal information we hold about you.
Rectification: you can ask us to correct information you think is inaccurate, or to complete information you think is incomplete.
Erasure: you can ask us to delete your personal information in certain circumstances.
Restriction: you can ask us to limit how we use your information in certain circumstances.
Objection: you can object to our use of your information where we rely on legitimate interests. We will stop unless we can show compelling grounds to continue.
Portability: where we use information you gave us on the basis of consent or a contract, you can ask us to pass it to you or to another organisation in a usable form.
Withdrawing consent: where we rely on your consent, you can withdraw it at any time. This does not affect anything done before you withdrew it.

To use any of these rights, write to privacy@index.aero or to the postal address above. We may ask you to confirm who you are before we act.

How to complain

If you are unhappy with how we have used your personal information, please tell us first at privacy@index.aero and we will try to put it right.

You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data protection regulator:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline 0303 123 1113
ico.org.uk/make-a-complaint

If you are in Ireland, you can also complain to the Data Protection Commission at dataprotection.ie.

Changes to this notice

We will update this notice when our use of personal information changes, and the date at the top will change with it. Material changes, such as adding analytics or a sign-up form, will be made before the change takes effect.