Privacy Policy
These documents apply now and are pending final solicitor review. We update them as the Service changes. If anything here does not match what the product does, please tell us at info@eiportal.com.
Data controller: EI Portal Ltd ("we", "us", "our")
Applies to: the Service — eiportal.com, beta.eiportal.com and related EI Portal websites, tools and services
Last updated: 8 August 2026
Governing law: England & Wales (UK GDPR & Data Protection Act 2018)
Defined terms: capitalised terms used but not defined in this document (including "Service", "Tools", "Output" and "Content") have the meaning given in our Terms of Use
1. Who we are
1.1 EI Portal Ltd is the controller of personal data processed through the Service. We are a company registered in England and Wales (company number 17251905), registered office Warwick Place, Bognor Regis, West Sussex, PO22 7PX.
1.2 We are registered with the UK Information Commissioner's Office (ICO), registration number ZC198763.
1.3 For any privacy question, or to exercise your rights, contact us at info@eiportal.com.
2. The personal data we collect
2.1 We aim to collect as little personal data as possible. Depending on how you use the Service, we may process:
| Category | Examples | Source |
|---|---|---|
| Identity & access data | Email address used to authenticate beta access; the plan/tier assigned to you | You / your access provider |
| Interest-registration data | The email address, name and the role or work you describe when you register interest at eiportal.com, plus the country the request comes from and your browser's user-agent string |
You / collected automatically |
| Feedback data | The content of any feedback, bug report or message you submit, plus your email, current plan, the tool or section you selected, and the submission timestamp and your browser's user-agent string | You / collected automatically |
| Error reports | If a Tool fails in your browser: the address of the page you were on, the technical details of the failure (error message and, where one exists, an error reference code) and your browser's user-agent string — see section 2.4 | Collected automatically |
| Usage & analytics data | Pages viewed, approximate location (country/region), device/browser type, referring page, anonymised performance metrics | Collected automatically |
| Technical & log data | IP address, request metadata, security events, timestamps | Collected automatically |
| Tool inputs | The engineering values you type into calculators/tools | You |
| Communications | Emails and messages you send us | You |
2.2 Tool inputs. The Service currently has no persistent user database: the values you enter into Tools are processed in your browser and are not stored on our servers, except to the extent they appear in any Feedback you choose to send us. Some of that work is saved in your browser's storage on the device you are using — including the project, asset and scenario names you type, the engineering values you capture, and the history of the tool runs that produced them. That storage never leaves your device: we cannot see it, it is not synchronised between your devices, it is not backed up by us, and it is permanently lost if you clear the site's data or move to another browser or device. The Cookie Policy describes it in full. This will change when accounts, saved projects and similar features launch — this policy will be updated, and this section will describe what is stored, where and for how long.
2.3 We do not intentionally collect special-category data (e.g. health, biometric or political data). Please do not submit such data through the Service.
2.4 Error reports. If a Tool fails in your browser, the Service automatically sends us a short technical report so we can find and fix the fault. The report contains the address of the page you were on, the technical details of the failure (the error message and, where one exists, an error reference code) and your browser's user-agent string. It is built only from the error itself: it does not include the values you have entered into Tools, your project workspace or anything else saved in your browser, and it contains no name or email address.
3. How and why we use your data (purposes and lawful bases)
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Authenticate and grant access to the beta / your account | Contract (Art. 6(1)(b)) and/or legitimate interests (Art. 6(1)(f)) in operating access control |
Respond to an interest registration you submit at eiportal.com, and contact you about beta access and launch |
Legitimate interests (Art. 6(1)(f)) in replying to a business enquiry you asked us to reply to |
| Provide, operate and maintain the Service and its Tools | Contract / legitimate interests |
| Respond to and act on your feedback, questions and support requests | Legitimate interests in supporting and improving the Service |
| Understand usage and improve the Service (analytics) | Legitimate interests in maintaining and improving the Service (using privacy-friendly, cookieless analytics) |
| Keep the Service secure and prevent misuse | Legitimate interests in security; legal obligation where applicable |
| Comply with our legal obligations | Legal obligation (Art. 6(1)(c)) |
| Send service or administrative communications | Contract / legitimate interests |
| Marketing communications (if any, in future) | Consent (Art. 6(1)(a)) — you can withdraw at any time |
3.1 Where we rely on legitimate interests, we have considered the impact on you and do not use your data in ways you would not reasonably expect or that override your rights. We keep a written record of that assessment; you can ask us for a summary at info@eiportal.com.
4. Who we share your data with (processors and recipients)
4.1 We do not sell your personal data. We share it only with service providers ("processors") who act on our instructions, with the payment reseller described below (which acts as a controller in its own right), and where required by law. Our key providers are:
- Vercel Inc. — hosting and delivery of the Service, our server runtime logs, and privacy-friendly Vercel Web Analytics (which does not use cookies and does not track individuals across sites).
- Cloudflare, Inc. — access control (Cloudflare Access processes your email to authenticate you), content delivery, security/anti-abuse, and hosting of the
eiportal.comsite together with the function that receives interest registrations. - Slack Technologies, LLC (a Salesforce company) — the feedback, bug reports and messages you submit through the Service, the interest registrations you submit at
eiportal.com, and the automatic error reports described in section 2.4, are delivered to, and stored in, our private Slack workspace so we can review and act on them. - GitHub, Inc. (a Microsoft company) — our private source-code repository. The beta access list, which contains the email address of each invited tester and the tier assigned to them, is held in that repository.
4.2 Server logs. If Slack is unavailable or not configured when you submit feedback through the Service, the submission — including your email address, your plan tier and the full text of your message — is written to our server runtime logs at Vercel instead, and we confirm to you that the message was received. In the same way, if an interest registration cannot be delivered to Slack, the email address you gave (and, depending on the failure, the name and role) is written to our Cloudflare log for that request. Error reports (section 2.4) follow the same pattern: if they cannot be delivered to Slack, the report — which contains no name or email address — is written to our server runtime logs at Vercel instead. Personal data captured in logs this way is kept for the log-retention period in clause 6, not the feedback-retention period.
4.3 Payments (from paid launch). Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle is a separate and independent controller of the personal data it collects to take and manage your payment: it decides how that data is handled and does so under its own privacy notice, not on our instructions. We receive from Paddle only the information we need to provide and support your subscription, and we do not receive or store your full card details.
4.4 We may also disclose personal data: to professional advisers; to a buyer or successor in the event of a sale, merger or reorganisation of our business; and to regulators, law-enforcement or others where required by law or to protect our rights, users or the Service.
5. International transfers
5.1 Some of our providers (including Vercel and Cloudflare) are based in, or process data in, the United States and other countries outside the UK. Where personal data is transferred outside the UK, we rely on an appropriate safeguard recognised under UK data-protection law — such as UK "adequacy" regulations, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework — so that your data receives an equivalent level of protection. You can ask us for more detail at info@eiportal.com.
6. How long we keep your data
6.1 We keep personal data only for as long as necessary for the purposes above:
- Access/identity data: for as long as you have access to the Service, and a reasonable period afterwards.
- Interest registrations: until we have responded and any beta-access or launch conversation with you has concluded, after which we delete them. You can ask us to delete your registration at any time at info@eiportal.com.
- Feedback and communications: for as long as needed to act on them and for a reasonable period for our records.
- Analytics/log data: for a limited period in line with our providers' standard retention.
6.2 We then delete or anonymise the data.
7. Your rights
7.1 Under UK data-protection law you have the right to:
- access a copy of your personal data;
- rectify inaccurate or incomplete data;
- erase your data ("right to be forgotten") in certain circumstances;
- restrict or object to certain processing (including processing based on legitimate interests, and any direct marketing);
- data portability for data you provided, where applicable; and
- withdraw consent at any time where we rely on consent.
7.2 To exercise any right, email info@eiportal.com. We will respond within one month (extendable for complex requests). There is normally no charge.
7.3 You also have the right to complain to the ICO (ico.org.uk, helpline 0303 123 1113), though we'd appreciate the chance to resolve any concern first.
8. Cookies and similar technologies
8.1 The Service uses strictly-necessary cookies set by Cloudflare to keep you signed in and to protect the Service, and stores a small number of functional items in your own browser — your theme preference, some tool preferences, and your project workspace (ei-portal-project-workflow-v1), which is the largest of them. Our analytics is cookieless. Full detail, including what the project workspace holds, is in our Cookie Policy.
9. Security
9.1 We use technical and organisational measures appropriate to the risk — including access controls, encryption in transit (HTTPS), and reputable infrastructure providers — to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children
10.1 The Service is intended for professional use and is not directed at, or intended for, anyone under 18. We do not knowingly collect data from children.
11. Automated decision-making
11.1 We do not carry out automated decision-making that produces legal or similarly significant effects on you within the meaning of UK GDPR Art. 22.
12. Changes to this policy
12.1 We may update this policy from time to time. The "Last updated" date shows the latest version, and we will tell you about material changes by an appropriate means.
13. Contact
13.1 EI Portal Ltd, Warwick Place, Bognor Regis, West Sussex, PO22 7PX — privacy contact info@eiportal.com.