Privacy notice

Who is responsible

ACTELUS is a trading name, not a company. No business has been incorporated behind it, so there is no registered name, company number or registered office to give you. The data controller is the individual who operates it, and the way to reach that person about anything on this page is the address below. A postal address will be provided on request. If a company is formed, it will be named here.

Data protection contact: info@actelus.com.

What is collected

Only what the enquiry form asks for:

• Your name, and your role if you choose to give it.
• Your business name.
• Your business email address.
• The topic or workflow area you select.
• An approximate volume figure, where you provide one.
• Your description of the current process and what you want to change.

The form has no file upload, so no documents or exports are collected through it. There is no requirement to provide personal data about anyone else, and you should not include any.

Why it is collected

To reply to your enquiry, to judge whether the work is a fit, and to scope it if it is. The lawful basis is our legitimate interest in responding to a business enquiry you chose to send. Enquiry details are not added to a marketing list and are not sold or shared for anyone else’s marketing.

How long it is kept

Enquiries that do not lead to work are deleted within 12 months. Where an enquiry becomes an engagement, the correspondence is kept for as long as the business relationship and any legal or accounting obligation requires, and then deleted.

Who processes it

Three providers process data on our behalf, each for one job:

• Cloudflare serves this website and runs the small piece of code that receives the enquiry form. It handles the request itself and the usual server logs. Its Turnstile check runs on the contact form to tell people from bots; it sees your IP address and browser signals for that, and nothing you type.
• Resend delivers the enquiry to us by email. It holds the contents of your message for as long as it takes to deliver it, and in its own sending logs.
• Google provides the analytics described below, and only if you accept it.

None of them is permitted to use your data for its own purposes. No other party receives it, and it is not sold or shared for anyone else’s marketing.

Where it goes

All three providers are based in the United States and operate globally, so your data is transferred outside the UK and the EEA. Each is engaged under the standard contractual clauses and the UK addendum to them, which is the mechanism those transfers rely on. We hold no copy of your enquiry anywhere other than the mailbox it is delivered to.

How it is protected

The site is served over HTTPS only. The enquiry endpoint validates what it receives and sends it straight on without storing it. Access to the mailbox is limited to the person who answers enquiries. None of this makes a system unbreakable, and we would rather say so than imply otherwise.

Analytics and cookies

Analytics loads only after you accept it, through the banner shown on your first visit. Declining it stores a single local preference so you are not asked again, and loads nothing else. The provider is Google Analytics 4, which sets its own cookies once accepted and processes the visit on our behalf.

Your rights

You can ask for a copy of the enquiry data we hold about you, ask for it to be corrected, ask for it to be deleted, ask us to restrict what we do with it, or ask for it in a portable form. Because we rely on legitimate interest rather than consent to answer your enquiry, you can also object to that processing at any time.

Where you did give consent — analytics is the only place — you can withdraw it at any time with the “Change your analytics choice” control at the foot of any page, which sets analytics storage back to denied and reloads the page without the tag. Withdrawing does not affect anything done beforehand.

Write to the contact address above and you will get a reply. If you are in the UK or the EU and are not satisfied with the response, you can complain to your data protection authority; in the UK that is the Information Commissioner’s Office.

Decisions and children

Nothing here makes an automated decision about you: an enquiry is read by a person. The site is aimed at businesses and is not intended for children, and we do not knowingly collect their data.

Changes

If this notice changes materially, the change is made here before the practice changes, not after.