Privacy Notice
Last updated: 8 August 2026
This notice explains how AC Data Analytics Ltd collects and uses personal data, and what rights you have. We are the data controller for the personal data described here.
Received a marketing email from us and want to know where we got your details? See “If we contacted you about your business” below. To stop hearing from us, reply “unsubscribe” to any email, or email andrew.carter@acdata-analytics.co.uk. We act on it immediately and permanently, and we do not ask why.
Who we are
AC Data Analytics Ltd
Registered in England and Wales, company number 16607121
Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ
Contact: andrew.carter@acdata-analytics.co.uk
If we contacted you about your business
We identify recently incorporated UK limited companies and offer them IT consultancy and automation services. If you received an email from us, this is how it happened.
Where we got your data
From the public Companies House register, which publishes company names, numbers, incorporation dates, registered offices, SIC codes and the names of directors. We then look at your company’s own public website to confirm the company is who we think it is, and to find a business email address that you have published. We do not buy contact data from data brokers, and we do not guess personal email addresses.
What we hold
- Company name, number, incorporation date, registered office and SIC codes
- Director name, as published on the register
- One business email address, either published on your website or a generic role address such as info@ or hello@
- Your company’s website address, and whether we have contacted you
We do not collect or process any special category data, financial data, or data about your customers.
Why, and on what legal basis
To offer you our services. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)) — our interest in finding clients for our business. We have carried out and documented a balancing assessment weighing that interest against your privacy, and we limit ourselves accordingly: one email per company, no follow-up sequences, and no contact at all where we cannot verify that the website genuinely belongs to your company. A copy of that assessment is available on request.
You have an absolute right to object to direct marketing. If you do, we stop — there is no balancing test on that right and we do not attempt to persuade you otherwise.
How long we keep it
- Companies we contacted and heard nothing from: 12 months, then deleted
- Companies we never contacted: 6 months, then deleted
- If you unsubscribe, we keep your email address on a suppression list indefinitely. This is the minimum needed to make sure we never contact you again, and is permitted under Article 17(3). Nothing else about you is retained.
Who we share it with
Nobody. We do not sell, rent, share or publish personal contact data, and it is never included in our data products or APIs. Our data products contain company-level information from the public register only.
If you are a client or prospective client
We hold the contact details, correspondence, project records, invoices and payment records needed to deliver and account for our work. The lawful bases are performance of a contract and legal obligation (tax and company law). Financial records are kept for six years as UK law requires.
Where we process personal data on your behalf as part of a project, we do so as a processor under your instructions, governed by a data processing agreement in the statement of work.
If you visit this website or email us
This site sets no tracking or advertising cookies and runs no third-party analytics. Our hosting provider keeps standard server logs (including IP addresses) for security and reliability, deleted on their routine cycle. If you email us, we keep the correspondence for as long as needed to deal with your enquiry and for a reasonable period afterwards.
Where your data is held
Our systems are hosted in the UK, the EEA and the United States. Where personal data is transferred outside the UK, we rely on UK adequacy regulations or the International Data Transfer Addendum, as appropriate.
Automated processing
We use automated systems to select and verify companies to contact, and to draft emails. These decide whether to contact a company; they make no automated decision that produces legal effects for you or similarly significantly affects you, and we do not profile individuals. Every marketing email is reviewed and authorised by a person before it is sent.
Your rights
| Right | What it means |
|---|---|
| Object to marketing | Absolute. We stop immediately. |
| Access | Get a copy of the personal data we hold about you. |
| Rectification | Have inaccurate data corrected. |
| Erasure | Have your data deleted, in most circumstances. |
| Restriction | Ask us to pause processing while a dispute is resolved. |
| Object generally | Object to processing based on legitimate interests. |
| Portability | Where processing is by consent or contract and automated. |
Email andrew.carter@acdata-analytics.co.uk to exercise any of these. You do not need to use a special form or mention the GDPR. We respond within one month, and it is free.
Complaints
Please tell us first if something is wrong — we would rather fix it. You also have the right to complain to the UK regulator at any time:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire, SK9 5AF
Helpline 0303 123 1113 · ico.org.uk/make-a-complaint
Changes
If we change this notice we will update the date at the top. Material changes affecting people we have contacted will be notified directly.