Privacy Policy

The Data Company ("we", "us", "our") operates from offices in the United Kingdom and South Africa. This policy explains what personal data we collect through this website, why, and what rights you have over it.

Who we are

The Data Company, with offices at Cardinal Point, Park Road, Rickmansworth, Hertfordshire, WD3 1RE, United Kingdom, and Block B1, EI Ridge Office Park, 100 Elizabeth Road, Bartletts, Boksburg 1459, Gauteng, South Africa.

What we collect

When you submit our contact form, we collect your first name, last name, work email address, company name, the topic you select, and the message you write. We do not collect payment or financial information through this site, and the site does not use advertising cookies. If you accept analytics cookies, we collect anonymous usage data through Google Analytics; the contact page also uses Google reCAPTCHA to block spam. See our Cookie Policy for details.

How we use it

We use the information you submit only to respond to your enquiry, route it to the right person on our team, and keep a record of the conversation. To help us prioritise and prepare, enquiries are automatically assessed by an AI system that checks whether the message is a genuine enquiry and looks up publicly available, professional information about your organisation (and your role, where it is publicly listed). The result is shared with our team internally and a person always reviews it; no decision with legal or similarly significant effect is made automatically. We do not use it for marketing without your separate consent, and we do not sell or rent personal data to third parties.

Legal basis for processing

We process contact form data on the basis of our legitimate interest in responding to enquiries about our services, and, where applicable, to take steps prior to entering into a contract with you or your organisation.

Who we share it with

Enquiry details are delivered to our team via Resend, our transactional email provider. The AI assessment described above is carried out using Google's Gemini API, configured not to store enquiry data. The spam check is provided by Google reCAPTCHA, and, if you consent, site usage is measured with Google Analytics. These providers act as data processors on our behalf (Google acts independently for reCAPTCHA). We do not share your data with any other third party except where required by law.

International transfers

Because we operate as one connected UK and South African practice, enquiry data may be accessible to team members in both countries. We take reasonable steps to ensure any transfer of personal data between jurisdictions is protected to a standard consistent with UK GDPR and South Africa's Protection of Personal Information Act (POPIA).

How long we keep it

We retain enquiry records for as long as reasonably necessary to respond to you and maintain a record of our business communications, and delete or anonymise them when they are no longer needed for that purpose.

Your rights

Depending on where you are based, you may have the right to access, correct, delete, or object to our processing of your personal data, and to lodge a complaint with your local data protection authority (the Information Commissioner's Office in the UK, or the Information Regulator in South Africa). To exercise any of these rights, contact us using the details below.

Children's privacy

This site is intended for business audiences and is not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page shows when it was last revised.

Contact us

Questions about this policy or how we handle your data can be sent to canwehelp@thedatacompany.com.