This policy explains how User Actually Ltd collects, uses and protects personal data when you visit useractually.co.uk or get in touch with us through the forms on this website. We keep it short and plain, and we only collect what we need to reply to you.

Who we are

User Actually Ltd (“User Actually”, “we”, “us”) is a company registered in England and Wales, company number 13391438, with its registered office at 17 Green Lanes, London, England, N16 9BS. We are the controller of the personal data described in this policy.

If you have any questions about this policy or how we handle your data, email ege@useractually.co.uk.

What we collect

We collect the information you choose to give us through the forms on this website:

FormInformation collected
Free audit request (homepage)Name, email address, website URL, the services you’re interested in and, optionally, your monthly revenue range.
AI assessment (AI Services page)Name, email address, website URL and, optionally, a description of your content or merchandising challenge.
AI Product Listing Studio free trial (AI Services page)Name, email address, store URL and the number of products in your catalogue.

If you email us directly, we will also hold your email address and anything you include in your message.

When you visit the website, our hosting provider processes technical data such as your IP address, browser type and the pages you request, so that the site can be delivered securely. Our pages also load fonts from Google Fonts, which means your browser connects to Google’s servers and Google receives your IP address.

We do not use analytics, advertising or tracking cookies on this website.

How we use your data and our lawful basis

  • To respond to your enquiry and prepare the free audit or AI assessment you asked for. Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
  • To set up and support a free trial of our AI Product Listing Studio if you request one. Lawful basis: taking steps at your request before entering into a contract.
  • To follow up about your enquiry, for example to arrange a call or send the findings of your audit. Lawful basis: our legitimate interest in providing the service you asked about. We will not add you to a marketing newsletter without your consent.
  • To run and secure this website, including filtering spam form submissions. Lawful basis: our legitimate interest in keeping the site working and secure.
  • To meet legal obligations, such as keeping business and tax records if you become a client. Lawful basis: legal obligation.

Who we share it with

We do not sell your personal data. We only share it with service providers who help us run our business, under contracts that require them to protect it:

  • Netlify, Inc. hosts this website and processes and stores form submissions on our behalf as our data processor. See Netlify’s privacy policy.
  • Microsoft provides our business email (Microsoft 365), where form notifications and email correspondence are received.
  • Google serves the web fonts used on this site. See Google’s privacy policy.

We may also share data with professional advisers, such as accountants or lawyers, or where we are required to by law.

International transfers

Some of our providers, including Netlify, are based in or process data in the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards recognised under UK data protection law, such as the UK Extension to the EU–US Data Privacy Framework where the recipient is certified, or the UK International Data Transfer Addendum to standard contractual clauses.

How long we keep it

  • Enquiries that don’t lead to work: up to 2 years from our last contact with you, then deleted.
  • Clients: for the length of our working relationship and up to 6 years afterwards, to meet legal, accounting and tax requirements.
  • Form submissions held in Netlify: removed periodically once they have been transferred to our own records.

Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you;
  • ask us to correct data that is inaccurate or incomplete;
  • ask us to delete your data;
  • ask us to restrict how we use your data;
  • object to our use of your data where we rely on legitimate interests;
  • receive your data in a portable format; and
  • withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email ege@useractually.co.uk. There is no charge, and we will respond within one month.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Keeping your data secure

This website is served over HTTPS, and we limit access to your data to the people who need it to respond to you. No method of transmission over the internet is completely secure, but we take reasonable steps to protect the data you share with us.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.