Privacy notice

This website is run by NTUK Ltd, a company registered in England and Wales (company number 08765474), registered office Office 7, 35–37 Ludgate Hill, London EC4M 7JN. We are the data controller for the personal information described here, and we’re registered with the Information Commissioner’s Office under reference ZC231757.

This notice covers this website. Products NTUK Ltd runs under other names have their own privacy notices on their own websites.

Questions about this notice or your information: use our contact form, write to us at our registered office, or email us: Show email address.

When you send us a message. The contact form asks for your name, email address, company and, if you choose, your phone number, the systems you use, what you’d like help with and how you heard about us. If you’ve done our diagnostic and leave the box ticked, your answers and score are included. We use this to reply to you and arrange a conversation. Our lawful basis is our legitimate interest in responding to enquiries you send us, and taking steps you ask for before any contract.

When you book a call. The booking calendar is provided by Cal.com. It collects your name, email address, the time you choose and any notes you add, and puts the booking in our calendar. It only loads if you choose “Show available times”. Same lawful basis as above.

When you use the diagnostic. Your answers stay in your own browser (in session storage, which is cleared when you close the tab). They aren’t sent to us unless you choose to include them with a message or booking, or ask us to email you your results, in which case we use your email address only to send them, with your consent.

Spam protection. Our forms use Cloudflare Turnstile, which checks technical information about your browser and connection (such as your IP address) to tell people from automated spam. Our lawful basis is our legitimate interest in keeping the forms free of abuse.

Keeping the site running. Our hosting provider keeps short-lived technical logs (such as IP addresses and the pages requested) to run and secure the site. Our own logs record whether a message was delivered, not what it said.

Visitor statistics, only if you agree. If you accept analytics cookies, we use Google Analytics to see which pages are visited, how people arrive (for example from a search or a link), roughly where they are (country or city), what kind of device they use, and which features they use: booking and contact buttons, the capability explorer, the demo, site search, and whether they complete the diagnostic (its score, never your answers), send a message or book a call. It doesn’t tell us who you are, and Google Analytics doesn’t log or store IP addresses. Our lawful basis is your consent, which you can withdraw at any time from our cookie policy. If you reject, Google Analytics never loads.

We collect this information directly from you. The fields marked as required on the contact form are needed for us to reply; everything else is optional. We don’t sell personal information or use it for advertising.

These companies process personal information on our behalf, under contract, only to provide their service:

• Vercel: website hosting. The code that handles your messages runs in Vercel’s London region.
• Neon: the database that keeps a copy of messages sent through the contact form, stored in London.
• Resend: delivers contact form messages to our inbox.
• Cloudflare: Turnstile spam protection.
• Cal.com: the booking calendar.
• Google: Google Analytics, only if you accept analytics cookies. We keep analytics data for 14 months and don’t use it for advertising.

Some of these providers are based in, or use servers in, the United States. Where personal information leaves the UK, we rely on the safeguards each provider offers under UK data protection law, such as the UK Extension to the EU–US Data Privacy Framework or the ICO’s international data transfer agreement or addendum.

We may also share information with our professional advisers, with regulators or law enforcement where the law requires it, or with a buyer or successor if our business is ever sold or restructured, in which case this notice continues to apply.

We keep your enquiry and booking details while we’re in contact or working together, and for up to six years after our last contact (the usual period for legal claims in England and Wales). After that we delete them.

If you become a client, the information we need to deliver our work is kept for as long as our contract and the law require.

Information is encrypted in transit, access to our systems is restricted to the people who need it, and every provider we use is bound by contract to protect it. No method of transmission over the internet is completely secure, but we take appropriate technical and organisational measures to keep your information safe.

We don’t make decisions about you using solely automated means. The diagnostic score is calculated in your own browser, is for your information only and has no legal or similar effect.

Under UK data protection law you can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that’s wrong or incomplete;
• delete it, or restrict how we use it;
• stop using it where we rely on legitimate interests;
• send it to you or another organisation in a portable format;
• and, where we rely on your consent, withdraw it at any time.

Contact us through our contact form or by email (Show email address) and we’ll respond within one month. There’s no charge.

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right: we’ll acknowledge your complaint within 30 days and respond without undue delay. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

We don’t use advertising cookies. Analytics cookies are only set if you accept them. See our cookie policy for everything the site stores and how to change your choice.

This website is intended for businesses and isn’t directed at children.

We’ll update this page if anything changes, and show the date at the top.