Somvilla Custom Software & Automation

Legal

Privacy Policy

Last updated:

This policy explains what personal data Somvilla collects, why, and what we do with it. It is written in plain English. If anything is unclear, email gary@somvilla.com and we'll explain it.

Who we are

Somvilla is a custom software & automation business registered in Northern Ireland. Company No. [COMPANY_NUMBER]. For the purposes of UK data protection law, Somvilla is the data controller for personal information collected through this website.

ICO registration number: [ICO_NUMBER].
Contact: gary@somvilla.com

What we collect and why

Project brief form

When you submit a project brief via the Get a Quote form, we collect:

  • Your name and email address
  • Your company name, sector, and staff size
  • A description of your project or problem
  • Your approximate budget and timeline
  • How you found this website (optional)

Legal basis: Legitimate interest and pre-contractual steps — we need this information to assess whether we can help you and to prepare a quote.

We do not use this information for marketing. We will not add you to any mailing list. We will use your email address only to respond to your brief and, if work proceeds, to communicate about the project.

Interactive demos

The interactive demos on this site (Operations Dashboard, Booking System, Document Processing, and System Integrations) are entirely self-contained. They use hardcoded fictional data and run entirely in your browser. No data you interact with in the demos is transmitted to any server, stored, or processed externally. No account or login is required.

Website analytics

This website uses Plausible Analytics, a privacy-first analytics tool. Plausible does not use cookies, does not collect personal data, and does not track visitors across websites. The data collected (page views, referrers, country-level geography, device type) is entirely anonymised and aggregated. No cookie consent banner is required or shown.

Who we share your data with

We do not sell, rent, or trade personal data. The only third parties that may process your data are:

  • Resend — our transactional email provider, used to send you a confirmation when you submit a brief and to deliver quotes. Resend processes email addresses and message content. A data processing agreement is in place.
  • Cloudflare — this site is hosted on Cloudflare Pages and form submissions are handled by a Cloudflare Worker. Cloudflare may process request data (IP addresses, headers) as part of delivering and protecting the service.

We do not use any advertising platforms, remarketing pixels, or social media tracking scripts.

How long we keep your data

  • Brief submissions that do not result in a project: deleted after 12 months from the date of submission.
  • Brief submissions that result in a project: retained for 6 years from the end of the project for accounting and legal purposes, then deleted.
  • Analytics data: anonymised and aggregated. No personal data is stored.

Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data (subject to legal retention requirements)
  • Restriction — ask us to pause processing while a dispute is resolved
  • Portability — receive your data in a machine-readable format
  • Objection — object to processing based on legitimate interest

To exercise any of these rights, email gary@somvilla.com. We will respond within one calendar month. There is no charge for making a request.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

This website uses no cookies. Plausible Analytics operates without cookies and without any client-side data storage. No consent banner is shown because none is required.

Data (Use and Access) Act 2025

Somvilla is aware of the requirements of the Data (Use and Access) Act 2025 and operates in compliance with its obligations as a small data controller. Complaint logging and audit trail requirements are reviewed on an ongoing basis.

Changes to this policy

If we make material changes to this policy, the "Last updated" date at the top of this page will be changed. We will not notify you of minor editorial changes.