Privacy Policy

Who we are

Destemma Technologies (“Destemma”, “we”, “us”) is the data controller responsible for your personal data. We are a web development and cloud infrastructure service provider based in Barnsley, United Kingdom.

Contact: info@destemma.co.uk

What data we collect and why

We only collect personal data that is necessary for the purposes described below.

Data collected	Purpose	Lawful basis	Retention
Name, email address, phone, service, message (Contact form)	Responding to your business enquiry	Legitimate interests (Article 6(1)(f))	12 months from receipt, then deleted
First/last name, email, phone, and programme preferences (AI Builder Academy interest form)	Following up about the AI Builder Academy programme	Consent (Article 6(1)(a))	Until you withdraw consent or the programme's next intake closes, whichever is sooner
IP address, browser user-agent (all forms)	Fraud and abuse prevention (rate-limiting, spam detection)	Legitimate interests (Article 6(1)(f))	30 days, then deleted
Anonymised usage data (Google Analytics)	Understanding how visitors use the site so we can improve it	Consent (Article 6(1)(a)) — only collected after you click “Accept all”	26 months (Google's default retention), then purged

Cookies

We use two categories of cookies:

• Strictly necessary: a session cookie (CSRF token) that protects form submissions from cross-site request forgery attacks. This cookie is exempt from consent under PECR.
• Analytics (optional): Google Analytics 4 sets cookies to collect anonymised traffic data. These are only set after you click “Accept all” in the cookie banner. You can withdraw consent at any time by clicking “Reject non-essential” if the banner reappears, or by clearing your browser's local storage.

Who we share your data with

We do not sell your personal data. All form submissions (Contact and AI Builder Academy interest) are stored directly in our own database — they are not passed through any third-party form-processing service. We share data only where necessary:

• Google LLC (Google Analytics) — anonymised usage data, only with your consent. Google may process data in the United States; they participate in the EU–US Data Privacy Framework and provide Standard Contractual Clauses as a transfer safeguard.

We do not share data with any other third parties without your explicit consent.

International transfers

Google (our analytics processor) is based in the United States. Transfers are made under the safeguards described above. You can request a copy of the relevant safeguards by contacting us.

Your rights under UK GDPR

You have the following rights over your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — ask us to delete your data (“right to be forgotten”).
• Right to restriction — ask us to limit how we use your data.
• Right to portability — receive your data in a machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email info@destemma.co.uk. We will respond within one month.

How to complain

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

We would welcome the opportunity to address your concerns before you contact the ICO, so please reach out to us first.

Security

We take reasonable technical and organisational measures to protect your data, including HTTPS encryption, server-side input validation, CSRF protection, rate limiting, and access controls on stored submissions.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes. We recommend checking this page periodically.