This policy is a template. It must be reviewed, completed and checked against how the site actually handles data before launch. Highlighted items in brackets are details still to be confirmed.
1. Who we are
This website is operated by [legal entity name], trading as SCLogic (“SCLogic”, “we”, “us”, “our”). SCLogic is a digital systems studio that designs and builds bespoke technology for businesses.
For the purposes of UK data protection law, we are the controller of the personal data described in this policy.
- Company status: SCLogic is currently a trading name and is not a registered company.
- Address: SCLogic does not currently have a business address. Please contact us by email.
- Contact email: hello@sclogic.co.uk
- ICO registration number: [ICO registration number]
2. What this policy covers
This policy explains what personal data we collect when you visit this website or contact us through it, why we collect it, how we use and protect it, and the rights you have. It is written to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
It does not cover the personal data we may process on behalf of clients as part of project work. That is governed by the written agreement for the project.
3. Data we collect
Information you give us
If you send an enquiry through the contact form, we collect:
- your name;
- your email address;
- your company name, if you choose to give it;
- the services you are interested in; and
- the content of your message.
Please do not include passwords, payment details or special category data (such as health information) in your message.
How the form works: when you send the contact form, your details are sent by email to hello@sclogic.co.uk through an email delivery service, Resend (resend.com), which may keep a copy for a limited period ([confirm retention period]). This website does not keep its own copy. Your IP address is used briefly to limit repeated submissions, and our hosting provider keeps standard request logs.
If you email us directly, we will receive your email address, your message and anything else you choose to include.
Information collected automatically
Like most websites, when you visit, your browser sends technical information such as your IP address, browser type and the pages requested. This may be recorded in server logs by our hosting provider, Vercel, to deliver and secure the site.
The site’s fonts are hosted on the site itself, so loading them does not send your details to any other company. See our cookie policy for more detail.
We do not currently use analytics or advertising tools, and we do not use cookies to track you.
4. How we use it
We use the personal data described above to:
- read and reply to your enquiry;
- discuss your requirements and, if appropriate, prepare a proposal;
- keep a record of our correspondence with you;
- operate, maintain and secure the website; and
- meet our legal and regulatory obligations.
We do not sell your personal data, and we do not use it for automated decision-making or profiling that has legal or similarly significant effects on you.
We will not add you to a marketing list unless you have asked us to or the law otherwise allows it, and you can opt out at any time.
5. Lawful basis
Under UK GDPR we must have a lawful basis for using your personal data. We rely on:
- Legitimate interests: to respond to enquiries, keep records of our correspondence, and run and secure the website. We have considered that these uses are expected and proportionate, and that they do not override your rights.
- Steps before entering into a contract: where you ask us to discuss or quote for work.
- Legal obligation: where we must keep certain records, for example for tax and accounting.
- Consent: where we ask for it for a specific purpose. You can withdraw consent at any time.
6. How long we keep it
We keep personal data only for as long as we need it for the purposes described above.
- Enquiries that do not lead to work: [retention period, e.g. 12 months from last contact].
- Correspondence and records relating to client work: [retention period], or longer where the law requires it.
- Server logs held by our hosting provider: in line with the provider’s retention settings, [period to be confirmed].
When the data is no longer needed, we delete it securely or anonymise it.
7. Sharing and processors
We share personal data only where necessary. We use trusted service providers (“processors”) who handle data on our behalf, under a written contract, and only in line with our instructions. These are expected to include:
- website hosting: Vercel;
- sending email from the website: Resend (resend.com);
- receiving and storing email at hello@sclogic.co.uk: Resend (resend.com);
- email delivery for the contact form: Resend (resend.com), as described above.
We may also disclose personal data if the law requires it, to protect our legal rights, or to professional advisers such as accountants or solicitors who are bound by confidentiality.
8. International transfers
Resend, which sends and holds email for this site, is configured to use its Ireland (EU) region. Resend is a US company, so personal data may also be processed in the US ([confirm where Resend processes data and the safeguards used]). Some of our other service providers may also process personal data outside the UK. Where personal data is transferred outside the UK, we will make sure it is protected by an appropriate safeguard recognised under UK data protection law, such as a UK adequacy regulation or the UK International Data Transfer Agreement or Addendum.
The providers and safeguards used will be confirmed here before launch: [providers and transfer safeguards to be confirmed].
9. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and reputable service providers. No method of transmission over the internet is completely secure, but we work to protect your data and to respond promptly to any incident.
10. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict how we use your data in certain circumstances;
- object to our use of your data where we rely on legitimate interests, and to direct marketing at any time;
- data portability, where the processing is based on consent or a contract and carried out by automated means; and
- withdraw consent at any time, where we rely on consent.
To exercise any of these rights, contact us using the details below. We will respond within one month, which may be extended in some circumstances as the law allows. There is usually no fee.
11. Complaints
If you are unhappy with how we have handled your personal data, please contact us first so we can try to put it right.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint.
12. Changes to this policy
We may update this policy from time to time, for example when the contact form is connected or we change service providers. The “last updated” date at the top of this page shows when it was last revised.
13. Contact
For any question about this policy or your personal data, contact:
[legal entity name]
No business address at present
hello@sclogic.co.uk