Legal

GDPR

Last updated: 29 September 2026

1. Our commitment

V2 ERP Ltd (company number 17456292), registered office 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ, is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 in how we handle personal data submitted through this website. We act as the data controller for this data — see our Privacy Statement for the fuller picture of what we collect and why.

2. Lawful basis for processing

  • Consent — where you tick a consent box before submitting the Contact Us, CV submission or report conversion forms
  • Legitimate interests — responding to enquiries, assessing applications, and following up with people who have used our free report conversion service, all of which you have proactively initiated
  • Legal obligation — where we are required to retain or disclose information by law

3. Free report conversion service

Where you use our free Crystal Reports to Report Studio (.rpt to .rep) conversion service, we collect your name and email address, the report file you upload and, only if you choose to give them, your company name and phone number.

  • Why we collect it — to carry out the conversion, send the converted file and a summary of the conversion back to you (addressing you by name), and to follow up about technical services related to your submission. A phone number is only ever used to call you about your submission or related services, and only if you gave one.
  • How the file is handled — your file is processed on private, non-public-facing systems that we control. It is not shared with third parties, and is not used for any purpose beyond performing and improving the conversion service.
  • Report content — uploaded reports may contain data structures, field names or embedded query definitions from your own source systems. We treat this content with the same care as any other personal or confidential data you send us.
  • Retention — we keep a private record of submissions (your name, email address, company and phone number if given, the filename, the type of IFS report it matched and the conversion outcome) for up to 12 months from your last submission to support follow-up, after which it is deleted. This record is held on systems we control and is not shared with third parties or sold. Uploaded report files themselves are deleted once the converted file has been returned to you, unless you ask us to retain them for further assistance.
  • Opting out of follow-up — you can ask us to stop following up, or to delete your submission record, at any time — see section 5 below.

4. Your rights under GDPR

  • The right to be informed about how your data is used
  • The right of access to the personal data we hold about you
  • The right to rectification of inaccurate data
  • The right to erasure ("right to be forgotten")
  • The right to restrict processing
  • The right to data portability
  • The right to object to processing
  • Rights related to automated decision-making, including profiling — though we don't currently use your data for any automated decision-making of this kind

5. How to exercise your rights

To make a request relating to any of the rights above, please contact us with details of your request. We won't ask you to pay a fee, though we may need to verify your identity first. We will respond within one calendar month, as required by law.

6. International transfers

We primarily host and process personal data using UK and EU service providers. Where a service provider we use may process data outside the UK, we make sure appropriate safeguards are in place first, such as the UK's International Data Transfer Agreement or a provider's UK adequacy status.

7. Data security

We take reasonable technical and organisational measures to protect personal data submitted through this website against unauthorised access, loss or misuse. In practice, this means submissions are made over an encrypted (HTTPS) connection, our forms are protected against automated abuse by Cloudflare Turnstile, and access to personal data is limited to employees who need it for business purposes. Where we're required to, we'll report a personal data breach to the ICO within 72 hours of becoming aware of it, and notify anyone affected where the law requires it.

8. Complaints

We'd appreciate the chance to resolve any concerns directly — please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk at any time.