Privacy policy

Last updated 27 October 2026

Introduction

This policy explains what personal data we collect when you use c-2automation.co.uk or get in touch with us, why we collect it, who we share it with, how long we keep it and what your rights are.

We only collect what we need to reply to you and run this website.

Who we are

We C2 Automation Ltd, registered in England and Wales, company number 17074059. Registered office: Goldcrest Lodge, Upper Hexgreave, Farnsfield, Newark, NG22 8LS. Part of the C2 Technology Group.

We C2 Automation Ltd is the controller of the personal data described in this policy. In this policy, "we", "us" and "our" mean We C2 Automation Ltd.

You can contact us about this policy or your personal data:

The personal data we collect

When you send our contact form

Our contact form asks for:

  • your first and last name
  • your email address
  • your phone number (optional)
  • who the project is for (your home, your business, or as a builder or developer)
  • where the project is up to (optional)
  • your postcode (optional)
  • anything else you choose to tell us

When you send the form, it is processed by our website, which is hosted on a UK-based web server run by the C2 group. Your details are emailed to our enquiry inbox through SendGrid. The website itself does not keep a copy.

When you browse our website

Our website is delivered through Cloudflare, which provides a content delivery network and security services. Cloudflare, and our web server, process technical data such as your IP address, your browser type and the pages you request, so that the site can be delivered and protected from attacks and misuse.

We use Cloudflare Turnstile on our contact form to check that a person, not an automated program, is sending it.

Cookies

When you first visit, we ask whether you accept cookies.

  • If you accept, we use Google Analytics, set up through Google Tag Manager, to see how people find and use the site. Google sets its own cookies (such as _ga) to do this, which last up to 2 years.
  • If you decline, these are not used.
  • Either way, we keep a small cookie called c2_consent for 12 months so that we remember your choice. Cloudflare may also set a short-lived security cookie (such as __cf_bm) that is needed to protect the site.

You can change your choice at any time with "Cookie settings" at the bottom of every page.

When you phone or email us

If you phone or email us, we keep the details you give us so that we can deal with your enquiry.

How we use your data and our lawful basis

Data protection law requires us to have a lawful basis for each use of your personal data. These are ours:

  • Replying to your enquiry and preparing a quote. Taking steps you have asked for before entering into a contract with you. Where you contact us for a business, our legitimate interests in responding to people who ask to hear from us.
  • Understanding how the site is used, through Google Analytics. Your consent, which you can withdraw at any time with "Cookie settings".
  • Keeping the website secure and stopping spam, through Cloudflare and our web server. Our legitimate interests in protecting our website, our systems and our visitors.
  • Delivering work, if you become a client. Performance of our contract with you or your organisation, or our legitimate interests where the contract is with your organisation rather than with you.
  • Keeping records we are required to keep, such as tax and accounting records, and responding to lawful requests from authorities. Legal obligation.

Where we rely on legitimate interests, we have weighed our interests against yours, and you have the right to object (see "Your rights").

We do not send marketing emails to people who contact us through this website.

You don't have to give us your details, but we can't reply to you without a way to contact you. We don't make decisions about you by automated means.

Who we share your data with

We never sell your personal data. We share it only with the following, and only for the purposes in this policy:

  • Our web hosting, a UK-based web server run by the C2 group, which runs this website and processes the contact form.
  • Cloudflare, which delivers and protects this website, processes IP addresses to do so, and provides spam protection on our form through Turnstile.
  • SendGrid (part of Twilio), which delivers the contact form's emails to our enquiry inbox.
  • Google, which provides Google Analytics and Google Tag Manager, only if you accept cookies.
  • Microsoft, which provides the email system our enquiry inbox runs on.
  • Other companies in the C2 Technology Group (We C2 IT, We C2 Software and We C2 Marketing), only where that is needed to deliver the service you asked us about.
  • Professional advisers, regulators, law enforcement or courts, where the law requires it or where it is needed to establish, exercise or defend legal claims.

Our service providers act on our instructions and must keep your data secure.

Transfers outside the UK

Some of our providers, such as Google, Microsoft and SendGrid, may process personal data outside the UK. Where they do, the transfer is protected in one of the ways UK law allows: regulations made by the UK government approving transfers to that country (often called adequacy regulations), the International Data Transfer Agreement (IDTA), or the UK Addendum to the EU standard contractual clauses. You can contact us for more information about the safeguards that apply.

How long we keep your data

We keep personal data only for as long as we need it:

  • Enquiries that do not lead to work: 24 months after our last contact with you.
  • Client records: for as long as we work together, then 6 years after the work ends.
  • Tax and accounting records: 6 years from the end of the financial year they relate to.
  • Technical and security logs on our web server: up to 90 days.

How we keep your data safe

This website is served over an encrypted connection. We limit access to personal data to the people who need it to do their job, and we use technical and organisational measures that are appropriate to the risk to protect it from loss, misuse and unauthorised access.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you
  • ask us to correct data that is wrong or incomplete
  • ask us to delete your data
  • ask us to restrict how we use your data
  • object to our use of your data where we rely on legitimate interests
  • withdraw your consent to analytics cookies at any time
  • ask for data you gave us in a portable format, where we rely on a contract or your consent

Some of these rights apply only in certain circumstances. To use any of them, contact us using the details above. We will reply within one month. If your request is complex, we may need up to two more months, and we will tell you if so.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed. If we make a significant change, we will make it clear on this website.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first so that we can try to put it right. We will acknowledge your complaint within 30 days and respond without undue delay.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection: