Privacy Policy

YouAutomate is the data controller for personal data collected through this website and in connection with sales and support enquiries, unless we agree in writing that we act as a processor on your behalf for a specific client project.

Contact: info@youautomate.co.uk · +44 7885 830007 · London, United Kingdom

We may collect the following categories of personal data:

• Identity and contact details — name, business name, email address, phone number, and job role.
• Enquiry and project information — messages you send via our contact form, emails, calls, or audit bookings, including details about tools you use and workflows you want to automate.
• Booking data — information you provide when scheduling a call through Calendly (or similar scheduling tools), such as name, email, and appointment preferences.
• Technical data — IP address, browser type, device information, and approximate location derived from analytics or server logs when you use our website.
• Usage data — pages visited, referral source, and interaction with our site, where analytics or cookies are enabled.
• Billing data — if you become a client, payment and invoicing details processed by our payment providers (we do not store full card numbers on our servers).

We do not intentionally collect special category data (such as health or biometric data) through this website. Please do not submit sensitive personal data via our contact form unless it is necessary for your enquiry.

We use personal data for the following purposes:

• To respond to enquiries and provide free automation audits or consultations.
• To deliver, host, monitor, and support automation workflows and related services under contract.
• To send service-related communications, including onboarding, changes, security notices, and billing.
• To improve our website, services, and customer experience.
• To comply with legal obligations and protect our legitimate business interests, including fraud prevention and dispute resolution.
• To send marketing communications about our services where you have opted in or where we have a legitimate interest and you have not objected (you can unsubscribe at any time).

Under UK GDPR, we rely on one or more of the following lawful bases:

• Contract — where processing is necessary to perform a contract with you or to take steps at your request before entering a contract.
• Legitimate interests — to operate and grow our business, secure our systems, and communicate with prospects and clients in a proportionate way that does not override your rights.
• Consent — where you opt in to marketing cookies or marketing emails, or where consent is otherwise required.
• Legal obligation — where we must retain or disclose data to comply with applicable law.

We may share personal data with trusted third parties who help us run our business, including:

• Website hosting and infrastructure providers.
• Scheduling tools (e.g. Calendly) when you book a call.
• Email and communication platforms.
• Automation and integration platforms (e.g. n8n, CRM, messaging APIs) where necessary to build or operate workflows you have commissioned — only with appropriate access controls and, where required, a data processing agreement.
• AI and language model providers (e.g. OpenAI, Anthropic, Google) when your workflows are designed to use those services — configured according to your instructions and applicable provider terms.
• Payment processors for invoicing and subscriptions.
• Professional advisers (lawyers, accountants) where reasonably necessary.
• Regulators or law enforcement when required by law.

We do not sell your personal data. We require processors to protect data appropriately and to use it only for the purposes we specify.

Some of our suppliers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK adequacy regulations, Standard Contractual Clauses, or equivalent mechanisms approved under UK law.

We retain personal data only for as long as necessary for the purposes described in this policy:

• Enquiry and marketing records — typically up to 24 months from last contact, unless you become a client or request deletion sooner.
• Client project and contract records — for the duration of the contract and up to 6 years thereafter for legal, tax, and accounting purposes.
• Server and security logs — typically up to 12 months.

Under UK data protection law, you may have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure in certain circumstances.
• Object to or restrict certain processing.
• Request data portability where applicable.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise your rights, contact us at info@youautomate.co.uk. We will respond within one month in most cases.

Our website may use essential cookies required for security and basic functionality. Where we use analytics or marketing cookies, we will ask for your consent where required by law.

Third-party embeds (such as Calendly scheduling widgets) may set their own cookies. Please review the relevant provider’s privacy policy for details.

We implement appropriate technical and organisational measures to protect personal data, including access controls, secure credentials, and least-privilege access to client systems. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows when it was last revised. Material changes will be highlighted on our website where appropriate.

If you have questions about this Privacy Policy or how we handle your data, contact info@youautomate.co.uk.