Who we are
Rotunda Tech Ltd is a company registered in England and Wales, with its registered office at 2nd Floor College House, 17 King Edwards Road, Ruislip, London, United Kingdom, HA4 7AE. We are the data controller for personal data collected through this website.
For anything in this notice, write to us at [email protected].
What we collect
We keep this deliberately narrow. Through this website we collect only what you choose to send us:
- Your name and email address, which the contact form requires so that we can reply.
- Your company name and the reason for your enquiry, where you choose to provide them.
- The content of your message.
- A reCAPTCHA assessment, described below, used to distinguish people from automated submissions.
We do not run advertising trackers, behavioural analytics or third-party marketing pixels on this site, and we do not set cookies for those purposes.
Why we use it, and on what basis
We use what you send us to read your enquiry, reply to it, and — where it leads somewhere — discuss and deliver work. Our lawful bases under UK GDPR are:
- Legitimate interests (Article 6(1)(f)): responding to business enquiries and protecting the form from abuse. We have considered your interests and believe a reply to a message you chose to send is what you would expect.
- Performance of a contract (Article 6(1)(b)): where an enquiry becomes an agreement between us.
- Legal obligation (Article 6(1)(c)): where we must retain records, for example for tax purposes.
We will not add you to a marketing list on the strength of a contact form submission.
Who processes it on our behalf
Two processors are involved when you use the contact form:
- Brevo (Sendinblue), which delivers the message to our inbox as transactional email. Brevo processes data in the EU.
- Google reCAPTCHA, which scores the submission to detect automated abuse. Google receives your IP address and interaction data for that purpose, under Google's own privacy policy and terms.
Both act under contract and may not use your data for their own purposes. Where a transfer leaves the UK, it relies on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.
How long we keep it
Enquiries that go no further are deleted within 24 months. Where an enquiry becomes a working relationship, we keep the correspondence for its duration and for six years afterwards, which is the period relevant to UK contractual and tax record-keeping.
Your rights
Under UK GDPR you may ask us to give you a copy of your personal data, correct it, erase it, restrict how we use it, or transfer it elsewhere. You may also object to processing carried out on the basis of legitimate interests.
To exercise any of these, email [email protected]. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.
Security
The site is served over HTTPS, and form submissions are transmitted over an encrypted connection. Access to the inbox receiving enquiries is limited to the people who need it and protected by multi-factor authentication.
Changes to this notice
We will update this page if our practices change, and revise the date at the top. This version was published on 19 September 2026.