Privacy Policy

This website is operated by ACHOMI LTD, a company registered in England and Wales under company number 17022983, with its registered office at 113 New Bridge Street, Newcastle upon Tyne, NE1 8ST, United Kingdom. We trade as Achomi Tech.

For the purposes of UK data protection law we are the data controller for the personal information described in this policy. That means we decide what is collected and why, and we are responsible for looking after it.

If you have any question about this policy, email us at team@achomi.net.

We collect as little as we can get away with. There are four situations where we hold information about you.

When you send us an enquiry. Our contact form asks for your name, email address, company name, the service you are interested in, an approximate budget range, and whatever you write in the message box. We use this only to reply to you and to discuss the work you are asking about. Our lawful basis is legitimate interests — you contacted us, so answering you is plainly what you expect — and, where you go on to become a client, steps taken at your request before entering into a contract.

When you subscribe to our newsletter. We store your email address and the date you subscribed. Our lawful basis is your consent, which you give by submitting the form and can withdraw at any time using the unsubscribe link in any email we send, or by emailing us. Withdrawing consent does not affect anything we sent you beforehand.

When you read the site — but only if you agree first. The first time you arrive, a bar at the bottom of the screen asks whether we may record your visit. Until you press Accept, we record nothing at all. If you press Decline, or simply ignore the bar, we record nothing at all and the site works exactly the same.

If you do agree, we record:

• which pages you viewed, and when;
• roughly how long each page was open and active in front of you. The timer pauses whenever you switch to another tab, so it measures time spent reading rather than time the window was left open;
• the website you arrived from, if any;
• your IP address, and the country, region and city it corresponds to;
• your browser, operating system and device type;
• your screen size, browser language and time zone;
• a random identifier stored in your browser, so that several visits from you are not counted as several different people. It contains nothing about you and is not shared with anyone.

Our lawful basis for all of this is your consent. You can take it back at any moment using the button in section 4, which also deletes everything we have recorded about you.

We use it to understand which pages are worth keeping and where our visitors are, nothing more. We do not use it for advertising, we do not build profiles, we do not follow you to other websites, and we never sell or share it.

Our server logs. Like every web server on the internet, ours records each request it receives: the IP address it came from, the time, the page requested, and the browser used. These exist so we can investigate errors and defend against attacks. They are kept for 30 days and then deleted automatically. Our lawful basis is legitimate interests in keeping the service secure and working.

We use no advertising or tracking cookies, and nothing on this site follows you to other websites.

The one cookie we set is a CSRF token, placed by our server when you use the contact or newsletter form. It exists purely to stop another website submitting that form while pretending to be you. It is classed as strictly necessary, so no consent is required for it, and it contains no information about who you are.

We also keep two small values in your browser’s local storage: your answer to the consent question, so we do not ask twice; and, only if you agreed, the random visitor identifier described above. Declining removes both.

Withdrawing consent must be as easy as giving it. This button does both: it stops all future recording, and it tells our server to delete every record already held about this browser.

Your choice applies to this browser on this device. If you use a different browser, or clear your browsing data, you will be asked again. We also honour your browser’s Global Privacy Control setting if you have it switched on — when we see it, we treat it as a refusal, do not record anything, and do not show you the consent bar at all.

If the delete button ever reports a problem, email team@achomi.net and we will remove your records by hand.

We do not sell your information, and we do not share it for anyone else’s marketing. The only organisations who come into contact with it are the ones that keep this website running:

• Hostinger — our server provider, whose servers are located in Manchester, United Kingdom. They hold the database and the logs on our behalf.

They act as our processor, meaning they may only use your information on our instructions and for no purpose of their own.

Our analytics is self-hosted, so no third party ever receives your browsing data.

We may also disclose information where the law requires it — for example in response to a court order — or to establish or defend a legal claim.

Your information is stored on servers in Manchester, United Kingdom, so it does not leave the United Kingdom. We do not transfer it abroad.

If that ever changes — if we move provider, or add a service that processes data outside the UK — we would rely on the UK Government’s adequacy regulations or on an International Data Transfer Agreement, so that your information keeps essentially the same protection it has here. We would update this page before making any such change.

• Enquiries — kept for two years after our last contact, then deleted. If you become a client, for as long as the contract runs plus six years, which is how long we must keep business records.
• Newsletter subscriptions — until you unsubscribe, and we remove the record shortly afterwards.
• Visit records (only where you consented) — 24 months, then deleted automatically. Or sooner, the moment you press the delete button in section 4.
• Server logs — 30 days.

UK data protection law gives you the right to:

• Ask what we hold about you, and get a copy of it.
• Have mistakes corrected.
• Have it deleted, where we have no good reason to keep it.
• Restrict what we do with it while a dispute is sorted out.
• Receive it in a portable format, or have it sent to someone else.
• Object to us relying on legitimate interests, including the analytics described above.
• Withdraw consent at any time, where consent is what we relied on.

To use any of these, email team@achomi.net. We will reply within one month. It costs you nothing, and we may ask you to confirm who you are so that we do not hand your information to somebody else.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at any time.

The site is served over an encrypted HTTPS connection, our database is not reachable from the public internet, and access is limited to people who need it. No system is perfectly secure, but if a breach ever put your rights at risk we will tell you and the ICO, as the law requires.

This site is meant for businesses and is not directed at children. We do not knowingly collect information about anyone under 13. If you believe a child has sent us their details, email us and we will delete them.

We update this policy when what we do changes. The date at the top always reflects the current version. If a change materially affects you we will make it obvious rather than quietly editing the page.

See also our Terms and Conditions.