Privacy policy

Last updated 30 July 2026

Who we are

UpScale Automation Ltd (“we”, “us”) is the data controller for personal data collected through this website. We are registered in England and Wales, company number 17366821. You can reach us at [email protected].

What we collect

We collect personal data in one place only: the booking form on our “Book a meeting” page. When you submit it we receive:

your name, work email address and phone number;
your company name;
your approximate annual turnover band and the country you are based in;
your team size, if that question is being asked;
anything you choose to write in the free-text notes field;
the country your request came from, as reported by our hosting provider, and the time of submission.

We do not run advertising or analytics trackers on this site, we do not use cookies for tracking, and we do not build a profile of your browsing. Our web fonts are served from our own domain rather than a third-party font service, so loading a page does not disclose your IP address to anyone but our hosting provider.

Why we use it, and our lawful basis

To respond to your enquiry and arrange a meeting. Lawful basis: your consent, given by ticking the consent box, and our legitimate interest in responding to people who ask us to get in touch.
To assess whether we are a good fit for each other. Lawful basis: legitimate interest in qualifying enquiries before taking up your time or ours.
To keep a record of business enquiries. Lawful basis: legitimate interest in maintaining ordinary business records.

We will not add you to a marketing mailing list on the strength of a booking request, and we do not sell or rent personal data to anyone.

Who else sees it

Your submission is processed by our website host and passed to us by email and SMS. That means the following processors handle it on our behalf:

Cloudflare — website hosting and delivery.
Resend — email delivery of the enquiry to our inbox.
Twilio — SMS notification to our team that an enquiry has arrived.
Microsoft — our business email, where the enquiry is stored and answered.

Some of these providers operate outside the UK. Where personal data is transferred abroad, it is protected by the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision, as applicable.

How long we keep it

If we do not go on to work together, we keep your enquiry for up to 24 months so we recognise you if you come back, then delete it. If we do work together, your details are retained under our client engagement terms and for as long as we are required to keep business records.

Your rights

Under the UK GDPR you have the right to ask us for a copy of your personal data, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time — that does not affect anything we did before you withdrew it.

Email [email protected] and we will respond within one month. If you are not satisfied with our response, you can complain to the Information Commissioner’s Office at ico.org.uk.

If you are in Australia, you may also contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We will update this page if what we do with personal data changes, and revise the date at the top.