Privacy notice
This notice explains what personal data autosentia.com collects, why, how long it is kept, and your rights. It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, for visitors in the European Economic Area, the EU GDPR.
Who is responsible for your data
Autosentia is run by Keith Taynton, who is the data controller for personal data collected through this website. To ask anything about your data, email hello@autosentia.com.
What we collect
When you use the contact form, we collect what you type in:
- your name and work email address;
- your organisation, if you give it;
- the topics you tick and your message.
When you visit the site, our hosting provider, Cloudflare, processes technical information so the site can be delivered and protected. This includes your IP address, browser and device type, the pages requested, and the time of the request. When you send the contact form, Cloudflare Turnstile checks that you are a person and not a bot, using signals from your browser.
We do not use analytics, advertising or tracking cookies, and we do not build profiles of visitors. You do not have to give us any personal data to browse the site.
Why we use it, and our lawful basis
| Purpose | Data | Lawful basis |
|---|---|---|
| Replying to your enquiry and discussing work you ask about | Contact form details | Legitimate interests (answering people who contact us), or steps you ask us to take before entering a contract |
| Keeping the site and contact form secure, and stopping spam and abuse | Technical information and Turnstile signals | Legitimate interests (running a secure website) |
| Keeping business records if you become a client | Contact details and correspondence | Contract, and legal obligation (for example tax and accounting records) |
We will not use your details for marketing unless you ask us to, and we never sell personal data. No decisions about you are made by automated means.
Who we share it with
We use a small number of service providers who process data on our behalf, under contracts that require them to protect it:
- Cloudflare, Inc.: website hosting, security, Turnstile spam protection, and delivery of contact form emails.
- Our email provider: stores the enquiry emails the contact form sends us.
We may also disclose data if the law requires it. We do not share your data with anyone else.
International transfers
Cloudflare operates a global network, so data may be processed outside the UK and EEA, including in the United States. Where this happens, it is protected by an adequacy decision (such as the UK Extension to the EU-US Data Privacy Framework) or by standard contractual clauses and the UK International Data Transfer Addendum.
How long we keep it
- Enquiries are kept for up to 24 months after our last contact with you, then deleted, unless you become a client.
- Client records are kept for the length of our work together and then for up to 6 years, as required for tax and legal purposes.
- Technical and security logs held by Cloudflare are kept for a short period, normally days, in line with Cloudflare's own retention.
Your rights
You have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to our use of your data where we rely on legitimate interests;
- ask for your data in a portable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email hello@autosentia.com. There is no charge, and we will reply within one month.
Cookies
Our own pages do not set cookies. Cloudflare may set strictly necessary security cookies, for example to tell people apart from bots. These do not track you across other websites and do not need your consent. The site's fonts are hosted on our own domain, so loading a page does not send your data to a font provider.
Other websites
This site links to StepCert (stepcert.com), ZipCourse (zipcourse.app) and other websites. Each has its own privacy notice, so please read theirs when you visit.
Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113. If you live in the EEA, you can complain to the data protection authority in your country.
Changes to this notice
We may update this notice from time to time. The date at the top shows when it last changed.