Prospective customers: we process publicly available company information from the Companies House register (company name, number, registered address, directors) to contact newly incorporated businesses about our service, under legitimate interests (Art. 6(1)(f) UK GDPR). Our emails include tracking of opens and link clicks so we know what's relevant. Every message includes a working opt-out; opting out is permanent.
Customers: name, email, phone, business content you supply, and payment records (processed by Stripe; we never see full card details), to deliver and bill the service (Art. 6(1)(b), contract).
Site visitors: form submissions on this site go to us via our form processor to answer your enquiry.
Service providers who process data on our behalf: hosting (Vercel), database (Neon), payments (Stripe), email (Resend and our mail provider), forms (Formspree), and AI-assisted content drafting (Anthropic). We do not sell personal data.
Prospect data: removed or anonymised within 12 months of last contact, immediately on opt-out. Customer data: for the life of the account plus statutory accounting periods.
Access, correction, deletion, objection to direct marketing (always honoured), and complaint to the ICO (ico.org.uk). Email hello@sidequest.london.