Privacy Policy

1. Who we are

Neo Analytica (“we”, “us”, “our”) is a data engineering consultancy registered in England and Wales, operating from London, UK. We are the data controller responsible for your personal data collected through this website (neoanalytica.co.uk).

Contact: For any privacy-related enquiries, please email us at privacy@neoanalytica.co.uk.

2. What data we collect and why

We collect personal data in the following circumstances:

Discovery call enquiries

When you submit a discovery call request, we collect your full name, work email address, company name, job title, preferred date, and the details you share about your data engineering challenges. We use this information solely to respond to your enquiry and arrange a consultation call.

Newsletter subscriptions

If you subscribe to our newsletter, we collect your email address to send you updates about data engineering, our services, and relevant industry content. You may unsubscribe at any time using the link in any email we send.

Website analytics

We use Google Analytics (GA4) to understand how visitors interact with our website. This collects anonymised data including pages visited, time spent on the site, approximate geographic location (country/city level), and device type. Google Analytics uses cookies. No personally identifiable information is shared with Google through this service.

Advertising measurement

If you accept advertising cookies, we use the LinkedIn Insight Tag and, where enabled, the Meta Pixel to measure the effectiveness of our advertising and build website audiences for future advertising. LinkedIn and Meta may process device and browsing information in accordance with their respective privacy policies. We do not send enquiry form content through these tags.

Contact and correspondence

If you contact us by email, we will retain that correspondence including any personal information you provide in order to respond to your enquiry.

Business-to-business outreach

We may use limited professional information about relevant contacts at UK companies and LLPs to send a small number of targeted business emails about Neo Analytica's services. This may include your name, work email address, job title, employer, and the public business source from which we identified a relevant commercial need. We do not use tracking pixels in these emails. Every message identifies Neo Analytica and provides a straightforward way to object to further contact.

Client accounts, subscriptions and connected sources

If you become a client, we use your account and business contact details to provide portal access, onboarding, support and subscription administration. Stripe processes payment card details; Neo Analytica receives customer, subscription and payment-status identifiers rather than your full card details. If you authorise a data connection, Airbyte may process connection metadata and source data solely to move the agreed data into the Neo service. The production scope, retention and security responsibilities are documented in the applicable agreement and Data Processing Agreement.

3. Legal basis for processing (UK GDPR Article 6)

We rely on the following lawful bases to process your personal data:

Legitimate interests (Article 6(1)(f)): Processing enquiry and contact form data to respond to business enquiries and assess potential client relationships; and proportionate, targeted outreach to relevant contacts at companies where our services are reasonably connected to their professional responsibilities. We balance this interest against the contact's rights and expectations before any message is approved.
Consent (Article 6(1)(a)): Newsletter subscriptions and analytics cookies, where you have given clear consent. You may withdraw consent at any time.
Contract (Article 6(1)(b)): Where we have entered into a services or subscription agreement, processing is necessary to provide the account, onboarding, billing and contracted service.
Legal obligation (Article 6(1)(c)): Where we are required to retain certain records to comply with applicable law (e.g. financial and tax records).

4. How we store and protect your data

We use cloud providers to operate this website and our business systems. Application functions that receive website enquiries are configured to execute in London, and enquiry records are stored in a PostgreSQL database in the EU West region. We use encryption in transit (TLS) and provider-supported encryption at rest. Access to personal data is restricted to those with a legitimate need.

Enquiry data submitted through the website is processed through Vercel, stored on Neon, and used by Resend to deliver operational email notifications. Some providers may process personal data outside the UK or EEA. Where this occurs, we rely on the provider's applicable transfer safeguards, such as an adequacy decision or approved contractual protections.

5. Data retention

Enquiry data: Retained for 24 months from the date of submission, or until you request deletion, whichever is sooner.
Client project data: Retained for 6 years following project completion in accordance with UK tax and accounting obligations.
Subscription and connected-source data: Billing records are retained where required by tax and accounting law. Connected-source data is retained for the service term and then deleted or returned as set out in the client agreement.
Newsletter subscribers: Retained until you unsubscribe or request deletion.
Business outreach records: Active prospect records are reviewed after 12 months. A minimal suppression record may be retained for longer so that we can respect an objection and avoid contacting the address again.
Analytics data: Governed by Google Analytics’ data retention settings (14 months by default).

6. Third parties we share data with

We do not sell or rent your personal data. We share it only with the following service providers, under appropriate data processing agreements:

Resend — transactional and individually approved business email delivery
Neon — PostgreSQL database hosting (EU West)
Vercel — website hosting and London-configured application functions
CookieFirst — cookie consent management and consent records
Google Analytics (GA4) — consent-based website usage analytics
Google reCAPTCHA — enquiry-form abuse prevention
Stripe — payment and subscription processing
Airbyte — managed source connectivity and data movement when authorised by a client
LinkedIn — advertising measurement and website retargeting, where you have consented
Meta — advertising measurement and website retargeting, where you have consented

We may also disclose personal data if required to do so by law or in response to a valid request by a public authority.

8. Your rights under UK GDPR

You have the following rights in relation to your personal data:

Right of access — to request a copy of the data we hold about you
Right to rectification — to request correction of inaccurate data
Right to erasure — to request deletion of your data (“right to be forgotten”)
Right to restriction — to request that we limit how we use your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at privacy@neoanalytica.co.uk. We will respond within 30 days in accordance with UK GDPR requirements.

9. Right to complain

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns before you contact the ICO.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date at the top. We encourage you to review this policy periodically.