Privacy Policy
This policy is a working draft prepared for review. Replace every highlighted placeholder and have it checked by a solicitor before the site goes live.
Who we are
Prametriq (“we”, “us”) operates prametriq.com. We are the data controller for the personal information described in this policy.
- Registered name: [REGISTERED COMPANY NAME]
- Company number: [COMPANY NUMBER]
- Registered office: [REGISTERED OFFICE — use a service address, not a home address]
- ICO registration: [ICO REGISTRATION NUMBER]
- Contact: [PRIVACY EMAIL]
What we collect
We collect very little, and we do not sell anything to anyone.
Information you give us
When you use the contact form we collect:
- Your name and email address — so we can reply to you.
- Your company and phone number — both optional, and only if you choose to give them.
- What you tell us about the work you want help with.
We also record the IP address, browser and referring page of the submission. That is used to detect automated abuse of the form, nothing else.
Please do not send confidential business information, personal data about other people, or anything covered by an NDA through this form. It is a first contact, not a secure channel.
Information collected automatically
- Server logs. Our hosting provider records standard technical information including IP address, browser type and pages requested. This is used for security and diagnosing faults.
- Google Fonts. This site loads typefaces from Google's font service. That request necessarily sends your IP address and browser details to Google. See Google's own privacy notice for how they handle it.
Cookies this site sets
Two, both strictly necessary for the site to function. Neither tracks you and neither is used for advertising:
- csrftoken — a security token that stops other websites submitting our forms on your behalf.
- sessionid — set only if you use the AI assistant, so your conversation holds together across messages.
See the cookie policy for the full detail.
Information stored in your browser, not sent to us
Some of this site's tools remember your choices using your browser's local storage — the country you selected on the cost calculator, your answers to the readiness check, and your cookie preference. This information stays on your device. It is never transmitted to us and we cannot read it.
The AI assistant
If you use the chat assistant, what you type is sent to Microsoft Azure OpenAI to generate a reply. It is processed to answer you and is not used to train any model.
Your conversation is held in your browser session so the assistant can follow the thread, and is discarded when the session ends. We do not store transcripts unless that is explicitly switched on — and if it ever is, this policy will say so, with a retention period, before it happens.
The assistant is a general information tool. Please do not enter personal or confidential information into it.
Why we use it, and our lawful basis
- To reply to you when you contact us — our legitimate interest in responding to enquiries, and steps taken at your request before entering a contract.
- To answer your questions in the assistant — our legitimate interest in providing information about our services.
- To stop the forms being abused — our legitimate interest in keeping the site working.
- To send you updates, only if you have asked for them — your consent, which you can withdraw at any time.
- To keep the site secure and working — our legitimate interest in operating a functioning, secure service.
How long we keep it
- Enquiries submitted through the form, and the emails they generate: [e.g. 24 months] after our last contact, unless you become a client.
- Assistant conversations: not stored. They exist only for the length of your browser session.
- Mailing list: until you unsubscribe.
- Server logs: as retained by our hosting provider, typically a short rolling window.
Who we share it with
We do not sell or rent your information. We share it only with service providers who help us operate, and only as far as necessary:
- Our website host, [HOSTING PROVIDER]
- Our email provider, [EMAIL PROVIDER]
- Our email sending provider, [EMAIL PROVIDER], which delivers our replies
- Microsoft Azure OpenAI, which generates the assistant's replies. Microsoft processes the text you send as a data processor and does not use it to train models.
We may also disclose information where we are legally required to.
Transfers outside the UK
Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement. [Confirm per provider before publishing]
Your rights
Under UK data protection law you have the right to:
- Ask what we hold about you, and get a copy
- Have inaccurate information corrected
- Ask us to delete it
- Object to, or ask us to restrict, how we use it
- Ask for it in a portable format
- Withdraw consent at any time, where consent is our basis
To exercise any of these, email [PRIVACY EMAIL]. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, or by calling their helpline. We would rather you told us first so we can put it right.
Automated decisions
The cost calculator and readiness check run entirely in your browser and produce general guidance, not decisions about you. The AI assistant answers questions; it does not assess, score or make decisions about you.
We do not carry out automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Changes
If we change this policy we will update the date at the top. Material changes will be flagged on the site.