Privacy policy
Last updated 25 July 2026
This policy explains what personal data The Data Family Ltd collects, why we collect it, and what you can do about it. We are the data controller for the information described here.
Who we are
The Data Family Ltd, registered in England and Wales, company number 14455834, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. You can reach us at hello@data.family.
What we collect
- Enquiry and booking details. Your name, email address, company, and whatever you tell us about your project when you book a call or email us.
- Project material. If we audit your application, we receive the code, configuration and any data you choose to share with us.
- Basic usage data. Aggregate, non-identifying statistics about which pages are visited. We do not use cookies for advertising or cross-site tracking.
Why we use it
- To answer your enquiry and hold the call you booked.
- To carry out an audit and produce a proposal, where you have asked for one.
- To deliver work under a contract with you, and to support it afterwards.
- To meet our legal and accounting obligations.
Our lawful bases are performance of a contract, our legitimate interest in responding to people who contact us, and legal obligation for record keeping.
Who we share it with
We do not sell personal data. We share it only with service providers who help us run the business, under contract and only as far as needed. These currently include our scheduling provider, email and document providers, our CRM, and cloud hosting. Where a provider is outside the UK or EEA, transfers rely on adequacy regulations or standard contractual clauses.
Your project code
Code and data you share for an audit are treated as confidential. We hold them only for as long as the engagement or the assessment requires, and we delete them on request. We are happy to sign a mutual NDA before you send anything.
How long we keep it
Enquiries that do not become projects are deleted within 24 months. Records relating to engagements are kept for 6 years to meet UK accounting and limitation requirements.
Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email hello@data.family and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If this policy changes we update the date at the top. Material changes will be flagged on this page.