Privacy Policy

Last updated 10 September 2026

Who we are

AmnoSoft Ltd (company number 08165266) is the data controller for personal data collected through this website. Our registered address is Unit 1 Sky View Tower, 8 High Street, London E15 2GR, United Kingdom. You can reach our data protection contact at hello@amnosoft.com.

What we collect

• Contact details you give us — name, email address, company and anything you write in an enquiry form.
• Technical data — IP address, browser type, device type and pages visited, collected through analytics.
• Communication records — emails, call notes and meeting summaries relating to an enquiry or engagement.
• Client project data — only what is necessary to deliver the work, governed by a separate data processing agreement.

Why we use it

We use contact details to reply to your enquiry and to deliver services you have engaged us for. We use technical data to understand how the site is used and to improve it. We do not sell personal data, we do not share it with advertising networks, and we do not build cross-site profiles.

• Legitimate interests — replying to enquiries, running and improving our site, and protecting it from abuse.
• Contract — delivering services you have engaged us to provide.
• Consent — analytics cookies, which are off until you accept them.
• Legal obligation — retaining records required by tax and company law.

Cookies and analytics

We use a single analytics provider to understand aggregate site usage. Analytics storage is denied by default and no analytics script is loaded until you accept. We use no advertising cookies and no cross-site tracking. See our Cookie Policy for the detail.

How long we keep it

Enquiries that do not become engagements are deleted after 24 months. Client records are retained for seven years after the end of an engagement to meet tax and professional obligations. Analytics data is retained for 14 months. You can ask us to delete your data sooner and we will unless we are legally required to keep it.

Sharing and transfers

We use a small number of processors — email, CRM, analytics, hosting and, where relevant to a project, AI providers. Each is bound by a data processing agreement. Some are located outside the UK; where that is the case, transfers are covered by UK adequacy regulations or standard contractual clauses. We never send client data to a model provider for training purposes.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to request a portable copy. To exercise any of these, email us and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk.

Security

We use encryption in transit and at rest, enforce multi-factor authentication on every system that holds personal data, restrict access on a least-privilege basis, and review access quarterly. If a breach occurs that is likely to affect your rights, we will notify you and the relevant regulator within the required timeframes.

Changes

We update this policy when our practices change. The date at the top of this page shows the last revision. Material changes affecting existing clients are communicated directly rather than only posted here.