Privacy Policy

1. Who we are

Andlane Ltd is a London-based automation studio. We build automations for small businesses and we are the data controller for the personal data described on this page. This policy covers the andlane.co.uk website, our contact form, our email and the client work we do. Our own apps (such as MigraineMe) have their own privacy policies on their own websites.

Contact: info@andlane.co.uk · andlane.co.uk

2. What we collect

• Contact form and email: your name, email address, the topic you pick and what you write to us.
• Client records: if you become a client, your company details, the agreed scope, invoices and our correspondence.
• Client business data: while we build an automation we may see data inside your systems (inbox, accounting software, CRM, documents). We process it on your instructions only, under our written agreement with you.

We do not run analytics or advertising trackers on this site, and we do not buy data about you from anyone.

3. Why we use it

• To answer your enquiry and scope a possible project (our legitimate interest in responding to you).
• To deliver and support what we build for you (performance of our contract).
• To invoice and keep accounting records (legal obligation).
• To send you news about Andlane, only if you asked for it. You can opt out at any time.

We never sell, rent or share personal data with third parties for their marketing.

4. Your systems and the tools we use

When we build inside your accounts we use the least access needed, and we remove our access at handover unless you keep us on for support. Automations we build may send parts of your data to AI providers and other services (for example to read an invoice or draft a reply). We set these up in accounts in your name wherever possible, choose settings where the provider does not train on your data, and tell you in the scope exactly which services are involved.

5. Hosting and security

This website is hosted on Cloudflare. Messages from the contact form are delivered to our mailbox by email. Our email runs on Google Workspace. Data is encrypted in transit, and only the people working on your project have access to it.

6. How long we keep it

• Enquiries that do not become a project: up to 12 months, then deleted.
• Client records and invoices: 6 years after the end of the financial year, as UK accounting law requires.
• Client business data seen during a build: not copied or kept beyond what the build needs, and deleted at handover.

7. Your rights

Under UK GDPR you can ask us to access, correct, delete, restrict or export the personal data we hold about you, and you can object to how we use it. Email info@andlane.co.uk and we will answer within a month. You can also complain to the Information Commissioner's Office at ico.org.uk.

8. Cookies

We set no cookies of our own and use no analytics or advertising cookies. Cloudflare may set a strictly necessary cookie to keep the site secure.

9. Contact

Questions about privacy go to:
Jordy Verwerft, Andlane Ltd
info@andlane.co.uk
andlane.co.uk