Privacy Policy.
How we collect, use, and protect personal data.
Introduction
Perkins SmartOps ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.
We are a UK-based business process automation company. Our registered contact is [email protected].
We operate in accordance with the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025.
What data we collect
We may collect the following types of personal data:
- Contact information you provide: name, email address, phone number, company name
- Communication data: the content of emails and messages you send us
- Technical data: IP address, browser type, device information, pages visited (collected via privacy-respecting analytics)
- Service data: information about your business processes shared during discovery calls and project work
Business contacts and prospect data
As part of business-to-business marketing, we may hold contact details for people at organisations we believe could benefit from our services. This is limited to business contact information: name, job role, firm, business email address, and business telephone number. We collect it either directly from you or from public sources such as company websites, public business directories, and professional networks.
Our lawful basis for this is legitimate interests, namely contacting organisations about relevant business services. Before we make any marketing call, we screen the number against the Telephone Preference Service and Corporate Telephone Preference Service registers, and we do not call numbers listed on either. You can ask us to stop contacting you, and to erase the details we hold about you, at any time by emailing [email protected]. We will action any such request promptly.
How we use your data
We use your personal data for the following purposes:
- To respond to your enquiries and provide our services
- To send you information you have requested about our services
- To improve our website and services
- To comply with legal obligations
We will never sell your data to third parties. We will never use your data for purposes other than those stated above without your consent.
Legal basis for processing
Under UK GDPR, we process your data on the following legal bases:
- Consent: when you contact us or subscribe to communications
- Legitimate interests: to improve our services and website
- Contractual necessity: to deliver services you have engaged us for
- Legal obligation: to comply with applicable laws
Data storage and security
Your data is stored on servers located in the United Kingdom and European Economic Area. We implement appropriate technical and organisational measures to protect your data, including encryption, access controls, and regular security reviews.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate personal data
- Erase your personal data (the "right to be forgotten")
- Restrict processing of your personal data
- Data portability: receive your data in a structured, machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at [email protected].
Automated decision-making
We do not make decisions about you by purely automated means that produce legal or similarly significant effects. Our automation services are designed with human oversight: where an automated workflow informs a decision, a person reviews it. If that ever changed, you would have the right to be told, to ask for a person to review the decision, to put your point of view, and to contest the outcome.
Analytics
We use Umami, a privacy-respecting analytics tool that is self-hosted on our own infrastructure. Umami does not use cookies, does not collect personal data, and does not track users across websites. It complies with GDPR, CCPA, and PECR without requiring cookie consent.
Third-party services
We may use the following third-party services in the course of delivering our work:
- Mythic Beasts: server infrastructure (UK data centres)
- Cloudflare: DNS and content delivery
- n8n: workflow automation (self-hosted on our infrastructure)
We do not share your personal data with these providers except as necessary to deliver our services.
Complaints
If you are unhappy with how we have handled your personal data, contact us at [email protected]. We will acknowledge your complaint within 30 days, look into it without undue delay, and tell you the outcome. We keep a record of complaints and how we resolved them. You can also complain to the Information Commissioner's Office at any time.
Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
Contact us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
Perkins SmartOps
Email: [email protected]