Privacy Policy

Autonomy ("we", "us") is a web, app and software development studio. The legal entity responsible for this website and your data is [legal entity name], registered in [country] under number [registration number], at [registered address].

You can reach us about anything in this policy at hello@autonomyglobal.com.

This policy explains what personal data we collect through autonomyglobal.com and when you contact us, why we collect it, who we share it with and the rights you have. Work we do for clients under a contract is covered by that contract and any data processing terms attached to it.

• What you send us. When you write to us, by email or through the message tool on our contact page, we receive your name, email address, company and whatever you choose to tell us. The message tool composes the email in your own mail app; nothing you type is stored on our site.
• Usage data, with your consent. If you accept analytics cookies we use Google Analytics 4 to see which pages are read, roughly where visitors come from, what device and browser they use and which site referred them. IP addresses are truncated before storage.
• Advertising data, with your consent. If you accept marketing cookies, the Meta Pixel records page views and similar events so we can measure whether our advertising on Meta platforms brought you here and build audiences for it.
• Technical logs. Our hosting provider records standard server logs, including IP address, request time and user agent, for security and to keep the site running.

• To answer your enquiry and discuss working together: our legitimate interest in responding to people who contact us, and, once we are working together, the performance of our contract.
• To understand how the site is used and to measure our advertising: your consent, which you give or refuse in the cookie banner and can change at any time.
• To keep the site secure and working: our legitimate interest in running the site properly.
• To meet legal obligations, such as accounting and tax records where we do business together.

We use one strictly necessary item of local storage to remember your cookie choice, and optional cookies for analytics and advertising only after you consent. The full list, with durations and how to change your mind, is in our Cookie Policy at autonomyglobal.com/cookies.

We do not sell personal data. We share it only with providers that help us run the site and the business, and only for the purposes above:

• [Hosting provider, e.g. Vercel] hosts the website and processes server logs.
• [Email provider, e.g. Google Workspace] delivers and stores our email, including your enquiries.
• Google LLC provides Google Analytics when you have accepted analytics cookies.
• Meta Platforms provides the Meta Pixel and advertising measurement when you have accepted marketing cookies.
• Professional advisers, such as accountants or lawyers, where necessary, and authorities where the law requires it.

Some of these providers process data outside the UK and the European Economic Area, including in the United States. Where they do, we rely on the safeguards the law provides, such as the EU-US Data Privacy Framework, the European Commission's standard contractual clauses and the UK International Data Transfer Addendum.

• Enquiries and correspondence: for as long as we are in contact and for [24 months] after our last exchange, unless we work together, in which case records are kept for the life of the engagement and [6 years] afterwards for accounting purposes.
• Analytics data: Google Analytics is configured to retain event data for [14 months].
• Advertising data: retained by Meta according to its own policies; audiences we build expire after at most [180 days].
• Server logs: [30 days].

Under the UK GDPR and the EU GDPR you can ask us to access, correct, delete or restrict the personal data we hold about you, object to our processing, receive a copy in a portable format and withdraw consent at any time without affecting what was done before. Write to hello@autonomyglobal.com and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office in the UK (ico.org.uk) or to the supervisory authority in your EU country.

The site is aimed at businesses and is not directed at anyone under 16. We do not knowingly collect data from children.

When we change this policy we update the date at the top of the page. Significant changes will be flagged on the site.