Privacy Policy

1. Introduction

IT Boffins Ltd ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

2. The Data We Collect

We collect only the information needed to run the site, answer enquiries and provide requested services. This may include:

• Identity and contact data: your name, business name, email address, telephone number and similar details when you provide them.
• Enquiry data: the message, project brief or website-estimate details you choose to send.
• Tool data: a URL, domain, text or configuration you submit to a public checker or generator, plus the result produced.
• Technical and security data: information such as IP address, browser, device, request timing and security-check results recorded by our hosting, logs and anti-abuse services.
• Usage and campaign data: pages, events and campaign attribution collected through optional analytics after consent.

3. AI Interactions

Some public tools use AI-assisted analysis to explain page content, diagnostics or text supplied by the visitor. When you choose to use one of those features:

• The submitted input and relevant derived page data may be sent to our server and an AI service provider, including OpenAI, to generate the requested result.
• Do not submit passwords, payment details, special-category personal data or confidential material to a public tool.
• Automated results are indicative and should be reviewed before you make an important technical, legal or commercial decision.

4. How We Use Your Data

We use personal data only for the purposes described when it is collected, including:

• responding to an enquiry, preparing a scope or taking steps you request before a contract;
• providing and supporting services under a contract;
• operating, securing and improving the website and preventing abuse; and
• measuring site use or campaign performance where you consent to optional analytics or marketing storage.

5. Lawful Bases

Depending on the purpose, we process data to take steps at your request or perform a contract, to meet legal obligations, for legitimate interests such as site security and service improvement, or with your consent for optional analytics and marketing storage.

6. Cookies, Browser Storage and Analytics

Essential storage supports security and requested features. Optional analytics and marketing storage remains denied until you make a choice in the cookie panel.

• Your cookie choice is saved in local storage for up to 180 days. You can change it sooner through the footer's Cookie settings control or by clearing browser data.
• Campaign attribution is kept for the browser session so an enquiry can be associated with its original source.
• A website-estimate brief may be kept in session storage for up to 12 hours, or until it is sent successfully, so it is not lost when moving to the contact page.
• Google Analytics storage is enabled only with analytics consent. Consent Mode may send limited cookieless consent and measurement signals while storage is denied. Our custom events do not include submitted form text, analysed URLs or domains, names, email addresses or telephone numbers.

7. Service Providers and Retention

We use service providers only where needed to host and secure the site, deliver email, provide analytics and run requested tools. Depending on the feature, these may include Google, Cloudflare, Microsoft and OpenAI services.

• Cloudflare Turnstile processes technical and security signals to protect the contact form from abuse.
• Google Tag Manager and Google Analytics support consent-controlled measurement.
• AI-assisted tools may pass the submitted input and relevant derived data to an AI provider to produce the result.

We retain enquiry and client records only for as long as needed to respond, provide the requested service, resolve disputes and meet accounting or legal obligations. You can ask us about the period that applies to your data.

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

9. Third-Party Links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

10. Your Rights and Complaints

Depending on the circumstances, you may ask to access, correct, erase or restrict your personal data, object to processing, request portability, or withdraw consent. Some rights are not absolute.

Contact us first so we can investigate. You can also read the ICO's complaint guidance.

11. Contact Details

If you have any questions about this privacy policy or our privacy practices, please contact us in the following ways: