Privacy Policy

1. Who We Are

ATTFT Limited ("ATTFT", "we", "us", "our") is a company registered in England and Wales.

Trading name notice: ATTFT Finding Technology is the trading name used in our products and services. The registered legal entity is ATTFT Limited (Company No. 15102834), incorporated in England and Wales.

We operate under SIC codes 58290 (Other software publishing) and 63110 (Data processing, hosting, and related activities).

We are the data controller for personal data collected through our website and in the course of delivering our services. For any data protection enquiries, contact us at contact@attft.co.uk.

2. What Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, phone number, company name provided when you complete our contact form or email us directly.
• Technical data: IP address, browser type, operating system, referring URLs, pages visited collected automatically when you visit our website.
• Communications: the content of emails, messages, or enquiries you send us.
• Client data: business information and project details shared in the course of service delivery.

We do not collect sensitive personal data (special category data) and do not knowingly collect data from anyone under 18 years of age.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries and provide information about our services
• To deliver contracted services and manage our client relationships
• To send relevant updates about our services (where you have consented)
• To improve our website and understand how visitors use it
• To comply with legal and regulatory obligations
• To detect and prevent fraud, security threats, and abuse

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases to process your personal data:

• Contract performance: processing necessary to fulfil a contract with you or take steps at your request before entering a contract.
• Legitimate interests: to operate and improve our website, respond to enquiries, and manage our business where these interests are not overridden by your rights.
• Legal obligation: where processing is required to comply with applicable law.
• Consent: for marketing communications you can withdraw consent at any time.

5. Who We Share Data With

We may share your personal data with:

• Service providers: third-party tools and platforms we use to operate our business (e.g. email hosting, website analytics, project management tools) bound by data processing agreements.
• Professional advisors: lawyers, accountants, and auditors under professional confidentiality obligations.
• Authorities: where required by law, court order, or regulatory requirement.

Where we transfer personal data outside the UK/EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

6. How Long We Keep Data

We retain personal data only for as long as necessary for the purposes it was collected, or as required by law:

• Enquiry data: 2 years from last contact
• Client data: 6 years from end of engagement (for legal and tax purposes)
• Website analytics: 14 months
• Marketing consent records: until consent is withdrawn, plus 1 year

When data is no longer required, it is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: request deletion of your data in certain circumstances.
• Restriction: ask us to restrict how we use your data in certain circumstances.
• Portability: receive your data in a portable format.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at contact@attft.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encryption in transit and at rest, access controls, and regular security reviews.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify you and the ICO as required by law.

9. Cookies

Our website uses cookies and similar technologies. Please see our Cookie Policy for full details on how we use cookies and how you can manage your preferences.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: contact@attft.co.uk
• Company: ATTFT Limited
• Registered in England and Wales

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the date it was last updated.