1. Who we are
Ermiro is a trading name of Voicewave TTS Ltd, a company registered in Cyprus (company number HE472136). We are the "controller" of the personal data described here.
Contact us about privacy at privacy@ermiro.com. General enquiries: jay@ermiro.com.
2. What we do
Ermiro contacts people at organisations who may want a product or service, and books meetings:
- for ourselves: we email people at EdTech companies to offer Ermiro's service; and
- for our clients: we email staff at UK schools, multi-academy trusts, colleges and universities on behalf of named EdTech companies, to offer a meeting about the client's product.
We only contact people in their work role, at their work email address.
If you use the contact form on our website, we receive your name, work email, company and message through our website host, and use them only to reply to you.
3. What data we hold
- Name and job title
- Organisation name, type, size and location
- Work email address and, where public, work phone number
- Public professional profile links (for example a company website page)
- Why your role is relevant to us
- Emails we send and receive, whether you replied, and your choices (for example "no thanks" or "unsubscribe")
We do not seek or use special category data (such as health, religion or ethnicity), and we do not contact pupils or students.
4. Where we get it
- Public websites of companies, schools, trusts, colleges and universities
- Public registers, such as Get Information About Schools (GIAS) and Companies House
- Public event exhibitor lists (for example Bett)
- For client campaigns, possibly a data service the client licenses (such as Apollo), used under that service's terms
- You, when you reply to us
We only use a source if its terms allow this use.
5. Why we use it (our lawful basis)
We rely on legitimate interests (UK GDPR and EU GDPR Article 6(1)(f)). Our interest, and our clients' interest, is to tell relevant professionals about products that may help their organisation, and to arrange meetings with those who want one. The law names direct marketing as a purpose that may be a legitimate interest. We have written a Legitimate Interests Assessment, which we will share on request.
For email marketing we also follow the Privacy and Electronic Communications Regulations (PECR). We email corporate bodies (for example limited companies) at work addresses. We do not cold-email sole traders or partnerships without consent.
6. Your right to say no
Every email we send has a simple way to opt out. If you opt out, or tell us in any way that you do not want marketing, we will stop. This right is absolute. We keep your email address on a short "do not contact" list so we never contact you again, including for other clients.
7. Who we share it with
- Our clients: only if you reply with interest or agree to a meeting. We then pass your name, role, organisation, contact details and the conversation to the named client so they can meet you. We tell you which client it is. If you do not reply, or say no, we do not pass your details to any client.
- Service providers who help us run the business, under contract and only on our instructions: for example Microsoft (email and office tools), our email-sending and data tools, website host and accountant.
- Authorities where the law requires it.
We never sell your data.
8. How long we keep it
- If you never reply: we delete your details 12 months after our last email to you.
- If you reply or have a meeting: we keep the record for 24 months after our last contact, then delete it.
- "Do not contact" list: we keep only your email address (and organisation) for as long as we run campaigns, so we can respect your choice.
- Once passed to a client, the client is responsible for its own copy under its own privacy notice.
9. Where your data goes
We are based in Cyprus (EU) and contact people in the UK. Data moves between the EU and the UK. The European Commission has recognised the UK as giving adequate protection (renewed in December 2025, running to 27 December 2031), and the UK recognises the EU in the same way. Where a service provider stores data elsewhere (for example the USA), we use a legal safeguard such as an adequacy decision or standard contract clauses.
10. Your rights
You can ask us to:
- stop using your data for marketing (absolute, see section 6);
- object to other uses based on legitimate interests;
- give you a copy of your data (access);
- correct it;
- delete it (erasure);
- restrict how we use it.
Email privacy@ermiro.com. We will reply within one month. It is free in most cases.
11. Complaints
Please tell us first at privacy@ermiro.com so we can try to put it right. We will acknowledge your complaint within 30 days.
You also have the right to complain to a regulator:
- UK: Information Commissioner's Office (ICO), ico.org.uk, 0303 123 1113
- Cyprus: Commissioner for Personal Data Protection, dataprotection.gov.cy, commissioner@dataprotection.gov.cy
12. Changes
We will update this notice if what we do changes. Last updated: 24 October 2026.