Your data, plainly.

Data ownership

Your data belongs to you, and so does the data the system creates. You can export all of it at any time, and we delete it when you ask us to or when our agreement ends.

Hosting (UK or EU)

Systems and data are hosted in data centres in the UK or the EU, chosen with you. Data is encrypted in transit and at rest, and backed up daily.

UK GDPR and EU GDPR

We act as your data processor under a written data processing agreement. We follow UK GDPR for British clients and EU GDPR for Irish clients, and only process personal data on your instructions.

EU AI Act

Where a system uses AI models, we document what they do and keep a person in charge of every decision that matters. We do not build systems in the Act's prohibited or high-risk categories without telling you first.

Sub-processors

We use a small number of named providers for hosting, email and AI models. The current list is available on request, and we tell you before we add a new one.

Insurance

We hold professional indemnity and cyber insurance. Certificates are available on request.

Cookies on this website

With your permission we use:

• Google Analytics (Google), to count visits and see which pages are useful.
• The Meta Pixel (Meta Platforms) and LinkedIn Insight Tag (LinkedIn), to measure our marketing and build audiences on those platforms.

These tools receive the pages you visit, your device and browser details, your IP address and cookie identifiers. Visitors in the UK, Ireland, the EU, the EEA and Switzerland are asked first and nothing is set until they accept; visitors elsewhere have these tools on by default and can switch them off. Anyone can change or withdraw their choice at any time from Cookie settings at the bottom of every page, and we keep a record of each choice and when it was made.