1. Who we are
This website is an online portal for comparing, selecting and reviewing IT services and software solutions, and for providing remote consultations on the choice of IT tools. It is operated by , a company registered in England and Wales under company number , with its registered office at (“we”, “us”, “our”).
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the controller of the personal data described in this policy. You can contact us about anything in this policy by email at .
2. What data we collect
The website does not use server-side forms and does not require registration. We collect personal data only when you choose to contact us, and only what you decide to share:
- Contact details — your name and email address, and a phone number if you include one in your message.
- Enquiry details — the content of your request for a consultation or tool selection, which may include information about your business tasks, current software, team size, budget range and IT infrastructure.
- Correspondence data — the history of our email exchange and, where you book a remote consultation, the scheduling details for that call.
- Technical data — our hosting provider automatically records limited technical information (such as IP address, browser type and pages requested) in server logs for security and stability purposes.
We do not collect special category data (such as health, religious or political information) and ask you not to include it in your messages. We do not collect payment card details through this website.
3. Purposes and legal bases
We process personal data for the following purposes and on the following legal bases under Article 6 UK GDPR:
- Responding to your enquiry — when you email us with a request for a consultation or tool selection, we process your contact and enquiry details to reply to you. Legal basis: your consent, given by sending the enquiry; you may withdraw it at any time.
- Providing consultations and selection services — preparing shortlists, running remote calls and answering follow-up questions. Legal basis: performance of a contract or steps taken at your request before entering into a contract.
- Running and protecting the website — maintaining security, preventing abuse and diagnosing technical issues using server logs. Legal basis: our legitimate interests in keeping the service safe and available.
- Compliance — keeping records we are required to keep and responding to lawful requests from authorities. Legal basis: legal obligation.
We do not use your data for automated decision-making or profiling, and we do not send marketing emails unless you have separately asked for them.
4. Sharing with third parties
We do not sell personal data. We share it only with service providers who help us run the service, under contracts that restrict how they may use it:
- Hosting provider — stores the website and its server logs.
- Email provider — delivers and stores our correspondence with you.
- Video-conferencing platform — used to hold remote consultations you book with us; the platform processes your display name and connection data under its own terms, which we will point you to before the call.
We do not take payments through this website, so no payment provider processes your data on our behalf here. If a payment for services is ever needed, it is agreed and documented separately by email before anything is charged. We may also disclose data where required by law, or in connection with a reorganisation or sale of our business, in which case this policy will continue to apply.
5. International transfers
We aim to keep personal data in the United Kingdom or the European Economic Area. Some of our providers (for example, email or video-conferencing platforms) may process data outside the UK. Where that happens, we rely on safeguards recognised under UK GDPR: a UK adequacy decision for the destination country, or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguards that apply to your data.
6. How long we keep data
- Enquiries that do not lead to a consultation — kept for up to 12 months after our last exchange, then deleted.
- Consultation and selection records — kept for up to 24 months after the service ends, so we can answer follow-up questions and evidence what was agreed.
- Records required by law (for example, basic accounting records where a paid engagement takes place) — kept for up to 6 years, as required by UK legislation.
- Server logs — retained by our hosting provider for short rolling periods, typically up to 90 days.
When a retention period ends, we delete or anonymise the data.
7. Security
We apply proportionate technical and organisational measures: encrypted connections (HTTPS) to the website, access to correspondence restricted to people who need it to answer you, two-factor authentication on our accounts, and reputable providers for hosting and email. No method of transmission or storage is completely secure, but if we become aware of a breach affecting your data we will act in line with our obligations under UK GDPR, including notifying you and the ICO where required.
8. Cookies
This website does not set analytics, advertising or tracking cookies and does not use browser storage for tracking. Our hosting infrastructure may set strictly necessary technical cookies needed to deliver the site securely; these do not identify you and cannot be switched off without affecting how the site works. If we ever introduce non-essential cookies, we will ask for your consent first and update this policy.
9. Your rights
Under UK GDPR you have the right to:
- Access — receive a copy of the personal data we hold about you;
- Rectification — have inaccurate data corrected and incomplete data completed;
- Erasure — have your data deleted in the circumstances set out in Article 17;
- Restriction — limit how we process your data while a dispute or check is resolved;
- Portability — receive the data you provided to us in a structured, machine-readable format;
- Objection — object to processing based on our legitimate interests;
- Withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, email . We respond within one month; we may ask you to confirm your identity first. Exercising your rights is free of charge.
10. Withdrawing consent
Where we rely on your consent — primarily to handle the enquiry you send us — you can withdraw it at any time by emailing us. Withdrawal does not affect the lawfulness of processing carried out before it, and it may mean we can no longer continue with your consultation or selection request.
11. Complaints
If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, website ico.org.uk.
12. Age restriction
The website and our services are intended for business users aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided us with personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time, for example when we change providers or introduce new services. The current version is always published on this page with its “Last updated” date. If a change materially affects how we use data you have already given us, we will tell you by email before it takes effect.