Privacy Policy

This policy explains what personal data Autratech collects through this website, why we collect it, how long we keep it, and what rights you have over it. It is written to meet our obligations under the UK GDPR and the Data Protection Act 2018. Last updated: 21 September 2026.

Who we are

Autratech is a trading name of AUTRATECH LIMITED, a company registered in England and Wales (company number 17034916), with its registered office at 344-348 High Road, Ilford, England, IG1 1QP. We are the data controller for the personal data described in this policy.

For anything in this policy, including any request about your data, contact us at hello@autratech.co.uk.

What we collect, and when

When you send an enquiry

Our contact form asks for your name, email address, company name, an indicative budget, and your message. Only the name, email address and message are needed for us to reply; the rest helps us respond usefully.

When you submit the form, three things happen: the enquiry is saved as a private record in this website’s database, a notification is emailed to our team, and an automatic acknowledgement is emailed to you. We do not require an account, and we do not ask for any special category data — please do not include any in your message.

When you simply browse

Our web server keeps standard access logs, which include your IP address, browser type and the pages you requested. These are generated automatically by the hosting infrastructure and are used for security, diagnosing faults and preventing abuse.

Cookies and similar technologies

This website’s theme sets no tracking cookies of its own. WordPress may set strictly necessary cookies for functions such as logging in or submitting a comment, and these are exempt from consent requirements under the Privacy and Electronic Communications Regulations because the service cannot work without them.

If analytics or advertising tools are active on this site, they are disclosed in the banner shown on your first visit, and non-essential cookies are only set after you consent. You can withdraw consent at any time through that banner or by clearing cookies in your browser.

Third parties that receive your IP address

Some of this site’s assets are served from other companies’ networks. When your browser requests them, that company necessarily receives your IP address and basic request information. We think it is worth naming them rather than leaving it implied:

• Google Fonts (fonts.googleapis.com and fonts.gstatic.com) — serves the typefaces used across the site.
• Cloudflare (cdnjs.cloudflare.com) — serves one JavaScript library used by an interactive element on the home page only.

We do not control what those providers do with that data; their own privacy notices govern it. We use them for performance rather than for tracking, and we set no identifier on you through either.

Why we are allowed to use your data

The UK GDPR requires a lawful basis for every use of personal data. Ours are:

• Legitimate interests — responding to a business enquiry you sent us, and keeping our website secure. We rely on this because you contacted us and would reasonably expect a reply; our interest in answering does not override your rights.
• Performance of a contract — where you become a client, to deliver the work and administer the engagement.
• Consent — for any marketing email, and for any non-essential cookies. You can withdraw it at any time, and doing so does not affect anything done beforehand.
• Legal obligation — for records we are required to keep, such as accounting records.

How long we keep it

• Enquiries that do not become projects: kept for up to 24 months, then deleted, so we have context if you come back to us.
• Client records: kept for the duration of the engagement and for 6 years afterwards, which is the period in which a contractual claim can be brought.
• Accounting records: kept for 6 years, as required by HMRC.
• Server access logs: typically kept for a short rolling period by our hosting provider.

If you ask us to delete your enquiry sooner, we will, unless we are required to keep it.

Who we share it with

We do not sell personal data, and we do not share it for anyone else’s marketing. We do rely on suppliers who process data on our behalf under written terms — our website host, our email provider, and the business tools we use to run projects. They may only act on our instructions.

We may also disclose data where the law requires it, or to establish or defend a legal claim.

Transfers outside the UK

Some of our suppliers operate outside the United Kingdom. Where personal data is transferred outside the UK, we rely on UK adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so that your data keeps an equivalent level of protection.

Your rights

Under the UK GDPR you have the right to:

• Be informed about how your data is used — which is what this policy is for.
• Access a copy of the personal data we hold about you.
• Rectification of data that is inaccurate or incomplete.
• Erasure of your data where there is no continuing reason for us to hold it.
• Restrict processing in certain circumstances, for example while accuracy is disputed.
• Data portability — to receive data you gave us in a machine-readable format.
• Object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent where consent is the basis we rely on.

To exercise any of these, email hello@autratech.co.uk. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, by calling 0303 123 1113, or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would appreciate the chance to put things right first.

How we protect your data

This site is served over HTTPS, enquiry records are stored privately and are visible only to authenticated administrators, and the form is protected against automated submission. Internally we apply access controls, code review and dependency scanning as standard practice.

Children

This is a business-to-business website and is not directed at children. We do not knowingly collect data relating to children.

Changes to this policy

If we change how we use personal data, we will update this page and the date at the top. Where a change materially affects you, we will tell you directly.