Privacy Policy

1. Introduction

Community Tech Ltd ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By using our website or services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number)
• Company or organisation name
• Information provided through contact forms
• Anything you type into the site assistant, when it is switched on (see section 11)
• Project requirements and specifications

Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• IP address and browser type
• Pages visited and time spent on pages
• Referring website addresses
• Device information

3. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and provide customer service
• Deliver the services you have requested
• Send you relevant information about our services (with your consent)
• Improve our website and services
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• With service providers who assist us in operating our website and business
• With IONOS, which hosts the server where we store the enquiries you send us; with Google, whose reCAPTCHA service checks contact form submissions for spam; and with Anthropic, which generates the replies from our site assistant when it is switched on. Sections 7, 10 and 11 set out what that means.
• When required by law or to protect our rights
• With your explicit consent

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

6. Your Rights

Under data protection laws, you have rights including:

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing

To exercise any of these rights, please contact us using the details below.

7. Cookies

Our website uses cookies to enhance your experience. Cookies are small files stored on your device that help us understand how you use our website. You can control cookie settings through your browser preferences.

One of them is strictly necessary rather than optional. Sending the contact form, or sending your first message to the assistant, sets a single session cookie. It protects those forms against cross-site request forgery and lets the assistant follow the thread. Neither the assistant nor the contact form sets it until you write something, and it is not used for analytics or advertising.

Opening the contact page also loads Google reCAPTCHA to stop spam. From then until you close or reload the site, Google may set or read its own cookies to tell people from automated form fillers. We use it for security, not analytics or advertising (see section 10).

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

9. Businesses We Contact About Their Website

Separately from information you provide to us directly, we sometimes contact organisations about the technology on their own public-facing websites, for example to let them know their site runs an end-of-life version of a framework such as AngularJS, and to offer our modernisation services.

What we process, and where we obtained it

We process your business contact details (such as a business email address and, where it identifies an individual, the associated name and role), your organisation and website domain, and a technical fact about your site that is publicly visible, for example the front-end framework version it loads. We obtain this from publicly accessible sources, principally your organisation's own website and public business directories. We do not buy personal-data lists from data brokers, and we do not collect special-category data for this purpose.

Why we process it, and our lawful basis

We use this information to send you relevant business-to-business information about web-modernisation services, and to alert you to a potential security or maintenance issue on your site. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): our interest in marketing relevant services to organisations with a demonstrable need, balanced against your rights. We have carried out a Legitimate Interests Assessment and will provide a copy on request.

How long we keep it

We keep this information only while you are a live prospect. If you opt out or ask us to stop, we delete your lead data, retaining only the minimum needed (such as your email address on a suppression list) to ensure we do not contact you again. Otherwise we delete inactive lead data after 12 months.

Your choices

You have the right to object to direct marketing at any time, and we will stop with no questions asked. To do so, reply to any message from us, use an unsubscribe link where provided, or contact us using the details below, and we action marketing opt-outs immediately. You also have the data-protection rights listed in section 6 above. If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, though we would appreciate the chance to address your concerns first.

10. Enquiries You Send Us

When you send the contact form, or ask the site assistant to pass a conversation to us, what you send is stored in our own enquiry system. That system runs on a server hosted for us by IONOS in Germany, which UK data protection law recognises as giving adequate protection. We also get an email with your name, your email address and your message so we can reply.

We use it to reply to you and to keep track of the enquiry as possible work. We only contact you about that enquiry, unless you ask us for more. Our lawful basis is our legitimate interest in answering you and, where you are asking about work, taking steps you have asked for before a contract.

We keep enquiries for as long as we need them to deal with your request and for our business records. If you would like yours deleted sooner, ask us and we will do it, as section 6 explains.

To keep spam out, the contact form uses Google reCAPTCHA. It looks at how the page is used and sends that information, including your IP address, to Google, which scores how likely the submission is to be automated. A submission that fails the check is refused, and the page then asks you to email us instead. Google's Privacy Policy and Terms of Service apply to that check. Our lawful basis is our legitimate interest in keeping the form free of spam. We do not store the result with your enquiry.

11. The Assistant on This Site

This site can show an optional chat assistant in the corner of the page. It only appears when we have it switched on. It is software, not a person, and it says so when you open it. You do not have to use it, and the contact form and our email address do the same job.

What it processes

Whatever you type into it, plus your IP address for rate limiting and abuse prevention. The conversation is held in a temporary session on our server so the assistant can follow the thread. Please do not paste anything confidential or any special-category personal data into it.

Who else sees it

To generate a reply, your messages are sent to our AI provider, Anthropic, which processes them on our behalf under its commercial terms. Those terms do not permit your inputs to be used to train its models. Anthropic may process data outside the UK under appropriate safeguards.

When it reaches a human

The conversation only reaches us if you ask for that using the "Send this to James" button and give us an email address, which is your choice and your consent to us replying. It is then stored and handled as an enquiry, as set out in section 10. If you do not send it to us, it is not passed to anyone and the session expires on its own.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: info@communitytech.co.uk
• Phone: +44 330 1337 111
• Address: Newbury, Berkshire