Legal
Privacy policy
Last updated:
Draft for legal review. This document was prepared in good faith to meet UK GDPR, PECR and consumer-law expectations, but it has not yet been reviewed by a solicitor. Items marked [to confirm] need the owner's input.
1. Who we are
AUTOMEXA LTD ("Automexa", "we", "us") is a company registered in England and Wales (no. 17390176), registered office Unit 9 The Farthing Enterprise Centre, 39 Farthing Grove, Netherfield, Milton Keynes, MK6 4JH. We are the controller of the personal data described here. Contact: info@automexa.co.uk. ICO registration number: [to confirm].
2. What we collect
- Enquiries: name, email, phone (optional), business name, website, the services you're interested in, budget range, your message, and your choices about privacy and marketing.
- Newsletter sign-ups: your email address, the consent wording you agreed to and when, the page you signed up on, referrer and campaign tags (UTM), your browser's user-agent and a one-way hash of your IP address.
- Technical data with enquiries: the page you used, referrer and campaign tags (UTM), your browser's user-agent, and a one-way hash of your IP address used only for spam and abuse protection.
- Analytics (only if you accept): pages viewed and actions such as button clicks, collected by our analytics provider.
- Calls to our AI demo line: when you call Mexy, your number and what you say are processed by our voice providers so she can answer. Calls may be transcribed and recorded to provide and improve the service [to confirm recording settings].
- Chat: if you open the ADEV chat, your messages and any files you choose to upload are processed by the chat provider to answer you.
- WhatsApp, email and phone: whatever you choose to send us.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Replying to your enquiry and preparing a quote | Steps at your request before a contract (6(1)(b)), and legitimate interests (6(1)(f)) |
| Delivering services you buy from us | Contract (6(1)(b)) |
| Preventing spam, fraud and abuse | Legitimate interests (6(1)(f)) |
| Website analytics | Consent (6(1)(a)), which you can withdraw at any time |
| Marketing emails | Consent (6(1)(a)); unsubscribe at any time |
| Accounting and legal obligations | Legal obligation (6(1)(c)) |
4. Who we share it with
We use trusted service providers (processors) who act on our instructions:
- Netlify (website hosting and form processing)
- Supabase (secure database for enquiries and newsletter sign-ups)
- Resend (email notifications)
- Our analytics provider, only if you accept analytics [to confirm provider]
- Cloudflare (hosting of the ADEV chat service; optional spam protection)
- Voice AI and telephony providers for Mexy (for example Vapi, Telnyx and Cartesia) [to confirm list]
- Stripe (payments, when you pay us)
We never sell your personal data.
5. International transfers
Some providers process data outside the UK, including in the USA. Where they do, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the UK International Data Transfer Agreement/Addendum [to confirm per provider].
6. How long we keep it
- Enquiries that don't become projects: up to 24 months after our last contact, then deleted [to confirm; deletion is currently a manual process].
- Client records: for the length of the contract plus 6 years for tax and legal reasons.
- Newsletter: while you're subscribed. If you unsubscribe, we keep your email and the date only as a suppression record so we don't email you again [to confirm].
- Analytics: as set by the provider, no longer than 26 months.
7. Your rights
You can ask to access, correct, delete or restrict your data, object to processing based on legitimate interests, ask for data portability, and withdraw consent at any time. Email info@automexa.co.uk. We'll respond within one month.
If you're unhappy, you can complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.
8. Automated decisions
We don't make decisions about you with legal or similarly significant effects based solely on automated processing. Our AI assistants answer questions and take messages; people make the business decisions.
9. Cookies
See our cookie policy.
10. Changes
We'll update this page if our practices change, and show the date above.