This policy explains what we collect when you contact us or work with us, why we collect it, who processes it on our behalf, and what we will never do with it. It is written to be read rather than to be legally impressive.
We collect only what is needed to answer you and to deliver work you have ordered:
We never ask for card numbers, banking credentials or account passwords, and you should not send them to us. Where a build needs access to one of your systems, it is granted through that system's own permission mechanism, not by sharing a password.
The legal bases are your consent when you submit the form, performance of a contract once you order work, our legitimate interest in operating and securing the site, and legal obligations relating to record keeping.
A small number of providers process data strictly on our instructions: our website hosting provider and the transactional email provider that delivers form submissions to our mailbox. They are bound by contract and may not use your data for their own purposes.
Separately, the automations we build for you run on platforms in your accounts. Those providers are your processors, not ours. We tell you which ones are involved and what they will process before anything is built, so the decision is yours to make knowingly.
Enquiries that do not lead to an order are deleted within twelve months. Project material is kept while the project runs and for a reasonable period afterwards so we can answer follow-up questions, then deleted. Records required by accounting law are kept for the statutory period.
You may ask us to confirm what we hold about you, to correct it, to delete it, to restrict how we use it, or to provide it in a portable format. Where we rely on consent you may withdraw it at any time. Write to [email protected] and we respond within one month. You also have the right to complain to your national data protection authority.
Form submissions are transmitted over an encrypted connection to a single mailbox with restricted access. Access to project material is limited to the people working on your project. Credentials and access tokens are never stored in plain text or shared outside that group.
Our services are aimed at businesses. We do not knowingly collect data from anyone under sixteen.
If this policy changes, the updated version appears here with a new date. Changes that materially affect existing clients are communicated by email.