Privacy
Your data. Handled properly.
We collect the minimum we need to answer your enquiry and do the work, keep it in the UK, never sell it, and never use your information or your customers' to train AI models.
Last updated: August 2025
01Plain-English summary
GlebeTech Ltd is a UK IT consultancy and application development company. This policy explains what we do with personal data on this website and in the course of our work.
Short version: the only information this site asks for is what you type into the enquiry form. We use it to reply to you and, if we end up working together, to run the engagement. We don't sell it, we don't advertise, and we don't feed your data — or your customers' — into AI training.
02Who we are
GlebeTech Ltd is the data controller for the personal data described in this policy. We are registered in England and Wales, company number 09372164, with our registered office at 66 Paul Street, London, England, EC2A 4NA.
For anything to do with data protection, email info@glebetech.com.
03What we collect
What you send us. The enquiry form asks for your name, company, email address, an optional phone number, the kind of work you're interested in, and whatever you write in the message box. That's it — there are no hidden fields.
What arrives automatically. Our hosting provider keeps standard server logs: IP address, browser and device type, the pages requested and when. These exist for security and abuse prevention, not analytics.
What we're given during an engagement. If we work together, we'll be given business contact details for the people we deal with, and — depending on the project — access to systems that hold your own customers' data. Section 08 covers that case, because our role there is different.
What we don't collect. No analytics or advertising trackers run on this site today. If that changes, nothing non-essential will load until you've said yes — see our cookie policy.
04What we do with it, and why we're allowed to
Under UK GDPR we have to name a lawful basis for every use of your data. Here they are in full.
| What we do | Data used | Lawful basis |
|---|---|---|
| Reply to your enquiry and arrange a call | Everything you typed into the form | Steps taken at your request before entering a contract |
| Deliver a project we've been engaged for | Business contact details, project correspondence | Performance of a contract |
| Keep the site up and fend off abuse | Server logs | Legitimate interests — running a secure service |
| Keep accounting and tax records | Invoicing and contract records | Legal obligation |
| Remember your cookie choice | The consent record itself | Strictly necessary — no consent required |
| Send you an occasional update, if you ask for one | Name and email | Consent — withdrawable at any time |
Where we rely on legitimate interests, we've weighed our interest against your rights and concluded it doesn't override them. If you disagree, you can object — see your data rights.
05What we never do
We never sell your data. Full stop.
We never use your data, your code or your customers' data to train AI models — ours or anyone else's. Where we build AI features for a client, we configure them so provider-side training on your content is off.
We never share your data with advertisers. There is no advertising on this site.
We never pass your details to anyone outside the suppliers listed in section 06 without asking you first.
06Where it lives, and who else sees it
This site is hosted by Vercel in the UK. Please see each applications's website and privacy policy for additional informaion on how we store specific data relating to each application.
The only third parties who handle your data are the suppliers we need to operate:
- our website host, which stores server logs;
- our email provider, which carries your enquiry to us;
- our accountants and, if ever needed, our professional advisers.
Each of them acts on our instructions under a written contract. None of them may use your data for their own purposes.
Fonts. Our typefaces are served from our own hosting, not from Google Fonts or any other font CDN. Loading a page on this site does not hand your IP address to a third party.
Transfers out of the UK. Where a supplier processes data outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
07How long we keep it
| What | How long | Why |
|---|---|---|
| Enquiries that don't become work | 12 months | So we have context if you come back to us |
| Client project records | 7 years after the engagement ends | Contractual and professional liability |
| Invoices and accounting records | 7 years | Required by HMRC |
| Server logs | 30 days | Security investigation window |
| Cookie consent record | 6 months, then we ask again | ICO guidance on re-consent |
When a period ends we delete the data or irreversibly anonymise it.
08When we're working on your systems
This is the part that's specific to consultancy, and it matters.
When we build or run software for a client, any personal data inside that system belongs to the client. They decide what happens to it; we act on their instructions. In UK GDPR terms they are the controller and we are the processor, governed by a written data processing agreement.
So if you're a customer of one of our clients and you want to see or delete your data, that request goes to them, not to us. If you send it to us anyway we'll pass it straight on and tell you we've done so.
09Your rights
Under UK GDPR you can ask to see your data, correct it, delete it, restrict or object to what we're doing with it, take it elsewhere in a portable format, or withdraw consent you've given.
We answer within one month and it costs nothing. Your data rights sets out each right in full and exactly how to use it.
10Cookies
Right now this site sets a single cookie, and only after you've interacted with the cookie banner: the record of what you chose. Nothing else is set unless you opt in.
Our cookie policy lists everything, and you can change your mind whenever you like from the cookie settings link in the footer.
11Children
This is a business-to-business site and it isn't aimed at children. We don't knowingly collect data from anyone under 18 through it. If you believe a child has sent us their details, email info@glebetech.com and we'll delete it.
12Changes
If we change this policy in a way that materially affects you, we'll update the date at the top and, where we hold your contact details and the change is significant, tell you directly.
Questions about any of this? Email info@glebetech.com