Privacy Policy
Effective date: [Effective date]
Worry not about your data, either. This page explains what we collect when you use bytenot.com, why, and what you can do about it. It's short because we don't collect much.
1. Who we are
Bytenot is a small digital agency. We build websites and products, custom software, and AI and automation tools.
- Legal entity: [Company legal name], trading as Bytenot
- Registered address: [Registered address]
- Company / registration number: [Company number, if any]
- Data protection contact: [hello@bytenot.com]
For data protection law, we are the "controller" of the personal data described on this page. We don't have a Data Protection Officer; we're not required to have one, but the contact above will answer any privacy question.
2. What we collect
When you send us an enquiry. Our enquiry form asks for:
- your name
- your email address
- a budget range
- what you need help with
- a short brief
We only collect what you type in. None of the fields are checked against other sources, and nothing is inferred from them.
When you email us (or reply to an email from us), we keep the messages and your email address.
When you visit the site. Like every website, ours runs on servers that keep standard access logs: your IP address, the pages you request, the time of each request, and your browser type. These logs are kept by our hosting provider, [hosting provider], for security and to keep the site running. We don't use them to identify or profile you.
We don't collect anything else. No analytics, no tracking pixels, no advertising identifiers, no social media plug-ins. Nothing you enter on the site is used to train AI models.
3. Why we use it, and our lawful basis
Data protection law (UK GDPR / EU GDPR) requires us to say which "lawful basis" we rely on for each use. Here they are:
| What we do | Why | Lawful basis |
|---|---|---|
| Read your enquiry and reply to it | To answer your question and, if you want, prepare a proposal | Taking steps at your request before entering a contract (Art. 6(1)(b)); our legitimate interest in responding to people who contact us (Art. 6(1)(f)) |
| Keep our correspondence with you | So we have a record of what was discussed if we work together, and so we can pick up where we left off if you come back later | Legitimate interests (Art. 6(1)(f)) |
| Keep server logs | To keep the site secure and diagnose faults | Legitimate interests (Art. 6(1)(f)) |
| Keep records we're required to keep | Tax, accounting and legal obligations, if you become a client | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we've weighed those interests against your rights and concluded that this kind of processing is what you'd reasonably expect when you contact a business. You can object at any time (see section 7).
You don't have to give us any of this information. If you don't, we simply won't be able to reply.
We never use your details for marketing unless you've asked us to, and we don't send newsletters.
4. How long we keep it
- Enquiries that don't lead to work: we delete them [X months] after our last exchange with you.
- Enquiries that become projects: we keep the correspondence for the length of the engagement and [X years] afterwards, in line with our record-keeping and tax obligations.
- Server logs: kept by [hosting provider] for [retention period per hosting provider], then deleted automatically.
If you ask us to delete your enquiry earlier, we will (see section 7), unless we're legally required to keep something.
5. Who we share it with
We don't sell, rent or trade your personal data. Nobody outside Bytenot sees your enquiry, except the suppliers below, who process it on our behalf and only on our instructions:
- [Hosting provider] — hosts the website and receives the enquiry form submission; also keeps the server logs. [Hosting provider privacy policy URL]
- [Email provider] — the form submission is delivered to us as an email, and our replies go through this provider. [Email provider privacy policy URL]
Both are bound by contract to keep your data secure and to use it only to provide their service to us.
We would also disclose personal data if the law required it — for example, a court order — or if it were necessary to protect our rights or someone's safety. That has never happened.
6. Where your data is stored
We are based in [Country/jurisdiction]. [Hosting provider] stores data in [hosting region(s)]; [email provider] stores data in [email provider region(s)].
If any of this involves transferring your data outside the UK or the EEA, we rely on [an adequacy decision / the UK International Data Transfer Agreement / EU Standard Contractual Clauses] to protect it. Ask us if you'd like a copy of the relevant safeguard.
7. Your rights
Under UK and EU data protection law you can ask us to:
- Tell you what we hold about you and give you a copy (access)
- Correct anything that's wrong (rectification)
- Delete it (erasure)
- Stop or limit what we do with it (restriction)
- Send it to you or someone else in a usable format (portability)
- Stop processing based on legitimate interests (objection)
Where we rely on consent (we currently don't), you can withdraw it at any time.
To exercise any of these, email [hello@bytenot.com]. We'll reply within one month and won't charge you. We may ask you to confirm your identity so we don't hand your data to the wrong person.
If you're unhappy with how we've handled your data, you can complain to a supervisory authority. In the UK that's the Information Commissioner's Office (ico.org.uk). In the EU it's the authority in the country where you live. We'd appreciate the chance to sort it out first, but you don't have to give us that chance.
If you're outside the UK and EU. Wherever you are — including in US states with privacy laws such as California's CCPA — we'll honour the same rights on request. We don't sell or share personal data for advertising, and we don't discriminate against anyone for exercising their rights.
We don't make any automated decisions about you, and we don't profile you.
8. Cookies
We don't use cookies for analytics, advertising or tracking, and we don't set any third-party cookies.
The site is built with Next.js. In its current configuration it sets no cookies at all. If we ever add one that's strictly necessary for the site to work (for example, to remember a preference you've chosen), it won't need your consent and we'll list it here. You won't see a cookie banner because there's nothing to consent to.
Fonts and other assets are served from our own hosting, so loading the site doesn't send requests to third-party services.
9. Children
Our services are for businesses, and the site isn't aimed at anyone under 18. We don't knowingly collect personal data from children. If you think a child has sent us their details, tell us and we'll delete them.
10. Security
Your enquiry travels to us over an encrypted connection (HTTPS) and is stored with providers that use industry-standard security. Access to it is limited to the [two/three] people who run Bytenot. No system is perfectly secure, but we keep what we hold to a minimum so there's little to lose.
11. Links to other sites
The site links to our profiles on Instagram (instagram.com/bytenot) and LinkedIn (linkedin.com/company/bytenot), and may link to other sites. Those sites have their own privacy policies, and we're not responsible for them. Following a link from our site sends nothing about you to us.
12. Changes to this policy
If we change how we handle personal data, we'll update this page and the effective date at the top. If a change is significant and we have your email address, we'll tell you directly. We won't use your data for a new purpose without telling you first.
13. Contact
Questions, requests, or anything else: [hello@bytenot.com]
Or write to: [Company legal name], [Registered address]