Seaton Systems

Privacy notice

How we handle website enquiries.

A concise explanation of the information we collect through this website and why.

Who we are

This website is operated by Seaton Systems, company number {{ COMPANY NUMBER }}, registered office at {{ REGISTERED ADDRESS }}. For the purposes of UK GDPR, we are the data controller for information submitted through this site.

Information we collect

When you use the contact form, we collect the information you provide, including your name, work email address, organisation, timing, and the content of your enquiry.

When you book a call, Cal.eu collects the information requested by the booking form, including your name, email address, timezone, chosen time, and any answers you provide. The connected calendar or conferencing provider receives the details needed to create the invitation.

If you enable the embedded calendar, Cal.eu and the Cloudflare service protecting it also receive technical connection information such as your IP address, browser and device information, request timestamps, and security data needed to deliver and protect the booking service.

PostHog measures aggregate use of public pages, including page paths, referral and campaign sources, browser, operating system, device category, approximate location, interactions with links and buttons, and limited conversion events. It does not receive contact-form or booking-form answers from this site. Our integration removes non-campaign query parameters before sending an event.

Why we use it, and our lawful basis

We use this information to understand and respond to your enquiry, determine whether our services are relevant, and maintain a record of the resulting business conversation. We do not use contact enquiries for unrelated marketing or sell personal information.

Our lawful basis for this processing is legitimate interests: responding to a business enquiry you have chosen to send us, and assessing whether we can help. Where we rely on legitimate interests, we have considered that this processing is proportionate and within your reasonable expectations as the sender of the enquiry.

We use booking information to arrange the call you request and manage the resulting business conversation. Our lawful basis is legitimate interests and, where applicable, taking steps at your request before entering a contract. Security and session storage needed to provide the booking service is used only after you request the embedded calendar. Cal.eu's optional time-display preference is enabled only when you choose Accept optional.

We use aggregate website measurement to understand which public content and acquisition channels are useful, identify ineffective journeys, and assess whether visits lead to enquiries or bookings. Our lawful basis, where data protection law applies, is our legitimate interest in measuring and improving our own business website. We run PostHog in its cookieless mode specifically to avoid cookies, persistent identifiers, cross-site tracking, and individual visitor profiles.

Service providers

The website is deployed using Cloudflare. Before an email is attempted, a contact enquiry is stored temporarily in a Cloudflare D1 database so it can be recovered if delivery fails. Contact enquiries are then forwarded by email using Resend. Aggregate website measurement is provided by PostHog, hosted in the EU. Appointment scheduling is provided by Cal.eu, Cal.com's EU-hosted service. These providers may process limited technical and submission data on our behalf, under their own data processing terms.

Resend dispatches our messages from its Ireland region. Region selection controls where a message is sent from, not where Resend stores customer data. Resend states that account data, email metadata, logs, and API records are stored in the United States, and its processing terms cover international transfers and message-content processing.

Retention

A contact enquiry held for delivery recovery in Cloudflare D1 has a 30-day expiry. After Resend accepts the email, the submitted name, email address, organisation, timing, consent, and message are immediately removed from that recovery record. The record then contains only operational metadata such as its reference, status, timestamps, and provider identifier until expiry. If forwarding fails, the submitted information remains available for manual recovery and is deleted or redacted when recovered, or by the 30-day purge at the latest.

Information in the delivered email and booking system is retained only for as long as it is reasonably needed to respond, manage the prospective engagement, meet legal obligations, or resolve a dispute.

Our PostHog project is configured to discard raw IP addresses at ingestion. Visitor identity is a privacy-preserving hash whose key changes every 24 hours and cannot be used to recognise the same visitor on another day. We retain the resulting aggregate website statistics according to our PostHog account settings and delete them when they are no longer useful for trend and conversion analysis.

Your rights

Under UK GDPR you have the right to ask us to: confirm what information we hold about you and access a copy; correct inaccurate information; delete information we no longer have a lawful reason to keep; restrict how we use it while a request is resolved; and object to processing based on legitimate interests. Where applicable, you also have the right to data portability.

To exercise any of these rights, use the contact form and state that your request concerns personal information, or call+44 7990 667788.

Complaints

We would appreciate the opportunity to address any concern directly first, using thecontact form. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), the UK's independent regulator for data protection, if you believe your information has been handled unlawfully.

Cookies

PostHog analytics runs in cookieless mode, without cookies, local storage, cross-site tracking, or persistent identifiers. The site stores your optional-booking preference locally for 180 days so it can be respected on later visits. Cal.eu remains unloaded until you accept optional booking preferences or explicitly request the calendar. See our cookie statement for the complete analytics description and itemised storage, purposes, controls, and durations.

Changes

This notice will be updated when the website's data handling or service providers materially change.