1. Information We Collect
We collect personal data when you interact with us online, download resources, book a consultation, or become a client. This may include:
- Identity data: first name, last name, job title, company name.
- Contact data: work email address, phone number, postal address.
- Project data: details about your business goals, current tooling, and automation priorities.
- Technical data: IP address, browser type, device information, and usage patterns captured via analytics tools.
- Marketing data: email preferences, campaign engagement, and communication history.
2. How We Use Your Data
We use personal information only where we have a lawful basis to do so—primarily legitimate interest or your consent. Typical uses include:
- Responding to enquiries and booking discovery sessions.
- Scoping, delivering, and managing client projects.
- Sending curated resources, service updates, or event invitations when you opt in.
- Improving our website, campaigns, and customer journey through aggregated analytics.
- Maintaining legal, financial, and compliance records.
3. Legal Bases For Processing
Depending on the context, we rely on one or more of the following legal grounds under UK GDPR:
- Legitimate Interests – to develop our services and respond to business enquiries.
- Consent – for optional marketing communications or when you submit optional form fields.
- Contract – to deliver proposals, statements of work, and ongoing engagements.
- Legal Obligation – to satisfy accounting, taxation, and regulatory requirements.
4. Sharing Your Information
We do not sell your personal data. We may share it only with:
- Cloud platforms we use to host landing pages, manage analytics, or send emails (e.g. HubSpot, Google Analytics, Microsoft 365).
- Specialist partners or contractors working under our direction to deliver a project or provide technical support.
- Professional advisers, insurers, and regulators where required by law.
Whenever we use data processors, we ensure appropriate contracts and safeguards (such as UK adequacy decisions or Standard Contractual Clauses) are in place.
5. International Transfers
Some of our service providers operate outside the United Kingdom. Where data leaves the UK, we rely on adequacy decisions (for destinations like the EEA) or approved safeguards to ensure your information remains protected.
6. Data Retention
We keep personal data only for as long as it is needed for the purposes listed above:
- Enquiry data: retained for up to 24 months after our last interaction.
- Client project records and contracts: retained for up to 7 years to meet legal and insurance obligations.
- Marketing preferences: retained until you opt out or request deletion.
- Website analytics: stored in aggregate form without identifying you wherever possible.
7. Your Rights
You have rights under data protection law, including the right to:
- Request access to the personal information we hold about you.
- Ask us to correct incomplete or inaccurate data.
- Request erasure of your data where there is no compelling reason for us to keep it.
- Object to, or request restriction of, certain types of processing.
- Withdraw consent at any time where processing relies on consent.
- Complain to the Information Commissioner’s Office (www.ico.org.uk) if you are unhappy with how we handle your data.
To exercise any of these rights, email [email protected].