Privacy Policy

Last updated: 10 September 2025

 

Who we are

This website is operated by Customers On Tap Ltd t/a Automation4HR (“we”, “us”, “our”). We are the data controller for personal data collected via this website.

Registered office:
Dragon House, Princes Way, Bridgend Industrial Estate,
Bridgend, Wales, CF31 3AQ, United Kingdom

Contact for privacy matters: danh@automation4hr.co.uk

 

What this policy covers

This policy explains what personal data we collect via this website, why we collect it, how we use it, how long we keep it, who we share it with, and your rights under UK GDPR and the Data Protection Act 2018.

 

What data we collect

Via website forms:

  • Name
  • Email address
  • Phone number
  • Message content
  • IP address and basic device/browser information (captured automatically for security and diagnostics)

Through subsequent communications or in the course of a business relationship (not always via the website):

  • Company, role, and other key contacts at your company
  • Postal address (e.g. for invoices or to send materials)
  • Preference notes (e.g. gift/snack preferences when we send occasional client gifts)

We also use cookies and similar technologies. For the full, current list of cookies and scripts in use, see our Cookie Policy.

 

Why we use your data (lawful bases)

  • Respond to enquiries you send us (UK GDPR Art. 6(1)(f) – legitimate interests).
  • Provide and manage our services if you become a client (Art. 6(1)(b) – contract).
  • Improve the website and measure performance via analytics (Art. 6(1)(f) – legitimate interests; consent where required by PECR).
  • Send marketing communications to business contacts (Art. 6(1)(a) – consent; and Art. 6(1)(f) – legitimate interests, observing UK PECR for B2B).
  • Security, fraud prevention and diagnostics (Art. 6(1)(f) – legitimate interests).
  • Occasional client gifts (e.g. sending thank-you items) using basic preference notes (Art. 6(1)(f) – legitimate interests; you can opt out anytime).

 

How we collect data

  • Directly from you when you submit a form or book a call.
  • Automatically via cookies, logs and similar technologies when you browse this site.
  • From follow-up emails or calls when discussing work.

 

Who we share data with (processors)

We use trusted vendors to run our website and communications. These may change over time, but currently include:

  • Hosting: SiteGround (website hosting).
  • Email delivery for forms: Mailgun.
  • Business email and documents: Google Workspace.
  • Analytics: Google Analytics 4; Ahrefs
  • Booking: TidyCal (call scheduling).
  • Lead management/CRM: Folk, ActiveCampaign, OnePageCRM (note: tooling may change).
  • File storage: Dropbox.
  • Security/bot protection: Google reCAPTCHA.
  • Advertising/insights: LinkedIn Insight Tag.

These providers act on our instructions as processors or, in some cases, as independent controllers (e.g. LinkedIn). We only share what’s necessary for the relevant purpose.

 

International transfers

Some providers are based outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, plus provider security measures.

 

How long we keep your data

  • Enquiry data (when no contract follows): kept for up to 24 months.
  • Marketing contacts: kept until you unsubscribe or we delete inactive contacts.
  • Analytics data: retained according to the platform defaults/settings (e.g. GA4 standard options).
  • Server and security logs: retained for a limited period for diagnostics and security.

We’ll delete or anonymise personal data once the relevant retention period ends or the purpose is achieved.

 

Cookies and similar technologies

We use cookies, pixels and similar technologies for functionality, analytics and (where enabled) advertising insights. Consent for non-essential cookies is managed via our banner. You can update your choices at any time.

See our Cookie Policy for details.

 

Your rights

Under UK GDPR, you have the right to:

  • Access your personal data and obtain a copy.
  • Rectify inaccurate or incomplete data.
  • Erase your data, or restrict its processing, in certain situations.
  • Object to processing based on legitimate interests, including direct marketing.
  • Data portability, where applicable.
  • Withdraw consent at any time, where processing relies on consent.

To exercise these rights, email danh@automation4hr.co.uk.

We aim to respond within one month, subject to legal extensions where permitted. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO).

 

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. No method of transmission or storage is 100% secure, but we work to protect your data in line with industry practice and legal requirements.

 

Third-party links

Our site may link to third-party websites. Those sites have their own privacy policies and we are not responsible for them.

 

Changes to this policy

We may update this policy from time to time. We’ll post the new version here and adjust the “Last updated” date.