Privacy Policy

Data Controller

Entrida Limited. Contact email: info@entrida.com

Registered office: 17 Green Lanes, London, England, N16 9BS

KVKK supervisory authority: Personal Data Protection Authority of Türkiye (https://kvkk.gov.tr).

For data protection inquiries, write to info@entrida.com.

Data We Collect

We collect business information you provide through our analysis forms (company name, industry, products, target markets), account information (email address), and usage data (pages visited, features used). We do not collect sensitive personal data beyond what is necessary to deliver our service.

Directly provided

Business information from our analysis forms (company name, industry, products, services, target markets, website URL), your account email address, and payment billing details processed via Revolut.

Automatically collected

IP address, browser type and version, pages visited, session duration, and feature interactions. This data is used for platform security and — where you consent — product analytics.

From third-party integrations

Data from services you connect to Entrida (for example, company information verified via Companies House). We receive only the data you explicitly authorise.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: For marketing emails, analytics cookies, and optional data processing (Art. 6(1)(a) GDPR).
• Contractual necessity: To provide our analysis service and process payments (Art. 6(1)(b) GDPR).
• Legitimate interests: For platform security, fraud prevention, and service improvement (Art. 6(1)(f) GDPR).

How We Use Your Data

Your data is used to generate market-entry analysis and assessment reports, scope and manage Market Entry Execution engagements, improve our analysis algorithms, and send service-related communications.

• Generate market entry analysis reports and compliance checklists.
• Scope and manage Market Entry Execution engagements with vetted specialists
• Process payments and manage your account and subscriptions.
• Send service-related communications: account confirmations, analysis results, and product updates.
• Improve our analysis algorithms, scoring engine, and platform features.
• Detect and prevent fraud, abuse, and security incidents.

Automated Decision-Making

Our market-entry analyses are generated by Entrida's automated analysis engine, which combines our proprietary scoring methodology and official data sources with AI-assisted analysis. The output is informational and intended to support — not replace — your business judgement. Under Article 22 of the UK GDPR you have the right to request a human review of any analysis you receive, contest its conclusions, and ask us to explain how a result was produced. To exercise this right, write to info@entrida.com.

Sub-Processors & Third Parties

We share personal data with carefully selected service providers who process it on our behalf under appropriate data processing agreements. Our named sub-processors are:

A current list of our sub-processors is available on request at info@entrida.com.

Data Retention

We retain your data only as long as necessary for the purposes outlined above:

• Account data: Retained while your account is active. Deleted upon account deletion request.
• Analysis history: Retained while your account is active for your reference. Deleted with account.
• Temporary analysis jobs: Automatically deleted after 24 hours.
• Payment records: Retained for up to 7 years as required by UK tax law. If you delete your account, these records are anonymised — your identity is removed — but the financial transaction itself is retained for this statutory period.

Security

Data is encrypted in transit using TLS 1.2+ and at rest within our managed cloud infrastructure, hosted in the EU. Access to customer data is enforced through row-level database access policies; administrative credentials are restricted to server-side systems and never exposed to the browser. We log access to sensitive operations and review them periodically. To report a suspected security issue, write to info@entrida.com.

International Data Transfers

Some of our sub-processors are located outside the EEA (primarily in the US). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission and UK ICO Addendum.

GDPR & KVKK Compliance

We process data in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Turkish Personal Data Protection Law (KVKK). Where data is transferred outside the EEA (see the International Data Transfers section below), appropriate safeguards apply.

KVKK · Data controller details

For data subjects in Türkiye, the data controller within the meaning of Law no. 6698 on the Protection of Personal Data (KVKK) is:

• Controller: Entrida Limited
• Address: 17 Green Lanes, London, England, N16 9BS
• Email: info@entrida.com

KVKK · Your rights under Article 11

Pursuant to Article 11 of KVKK, as a data subject you have the right to:

• Learn whether your personal data is being processed.
• Request information about the processing, if any.
• Learn the purpose of processing and whether your data is used in line with that purpose.
• Know the third parties (domestic or international) to whom your data is transferred.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction of your data within the conditions of Article 7.
• Request that any correction, deletion or destruction be notified to third parties to whom your data was transferred.
• Object to outcomes that arise solely from automated analysis, and claim compensation for damages caused by unlawful processing.

You may exercise these rights by emailing info@entrida.com. We respond within thirty days, free of charge unless the Data Protection Authority's tariff applies.

Your Rights

You have the right to access, correct, delete, or port your personal data. You may also withdraw consent or object to processing at any time. To exercise these rights, contact us at info@entrida.com.

• Right of access: Request a copy of your personal data.
• Right to rectification: Correct inaccurate personal data.
• Right to erasure: Request deletion of your personal data.
• Right to data portability: Receive your data in a machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact us at info@entrida.com. We will respond within 30 days.

Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with the Turkish Personal Data Protection Authority (KVKK) at kvkk.gov.tr.

Changes to This Policy

We may update this Privacy Policy when we change our data practices or to comply with legal requirements. We will notify you by email or in-app notice at least 14 days before any material change takes effect. The effective date at the top of this page is updated with each revision. Continued use of the platform after the effective date constitutes acceptance. Prior versions are available on request at info@entrida.com.