Privacy Policy
Version 1.0 · 1 October 2026
Who we are and what this policy covers
Aseri Ltd is registered in England and Wales, company number 16759374. We are the controller responsible for the personal information described in this policy.
This policy covers visits to aseri.co and enquiries sent through our website or directly to our team. It does not cover platform accounts, client project data, recruitment or the public-source information used in our risk intelligence. Contact us for privacy information about those activities.
For privacy questions, requests or complaints, email info@aseri.co.
Information we collect
Enquiries and correspondence. Our contact form collects your name and email address. You can also provide a phone number, the service you are interested in, a budget, your intended project start date and project details. We receive any additional information you choose to send when corresponding with us.
We need your name and email address to respond through the contact form. Other enquiry fields are optional. You are under no statutory obligation to make an enquiry. Please avoid sending sensitive personal information or information about other people unless it is necessary for your enquiry.
Website traffic and security. When you visit, our hosting and security services process technical information such as your IP address, browser information and request details to deliver the site and detect abuse.
Usage statistics. We use Umami at analytics.aseri.co to understand website usage. Its standard analytics collect page views, referring pages, browser and device information, and approximate location derived from an IP address. Umami uses derived identifiers to distinguish visits without analytics cookies. These statistics help us understand which pages are useful and improve the site.
Bot protection. Our contact form uses Cloudflare Turnstile. It processes technical signals, including your IP address and browser information, to distinguish human visitors from automated traffic. We receive a verification token and check its validity before accepting a submission. Turnstile does not receive the enquiry fields from our form. See Cloudflare’s Turnstile Privacy Addendum for information about its processing, including its own use of signals to improve bot detection.
How we use information and our lawful bases
Under UK data protection law, we must have a lawful basis for using personal information.
| Purpose | Lawful basis |
|---|---|
| Respond to enquiries, discuss your requirements and maintain related correspondence | Legitimate interests in responding to people who contact us and managing business relationships. Where you personally ask us to take steps before entering a contract with you, we rely on those pre-contractual steps instead. |
| Deliver the website, verify form submissions and investigate abuse | Legitimate interests in operating a reliable website and protecting visitors and our systems. |
| Understand website usage and improve its content | Legitimate interests in understanding how visitors use our website, to the extent the statistics involve personal information. Any consent required for the underlying technology must be addressed separately. |
| Meet applicable legal obligations | Legal obligation, where a specific law requires us to retain or disclose information. |
| Establish, exercise or defend legal claims | Legitimate interests in protecting our legal rights. |
Where we rely on legitimate interests, we must consider your rights and reasonable expectations alongside our interests. You can object to this processing as described below.
Submitting an enquiry is not consent to receive unrelated marketing. This policy does not describe a mailing-list subscription or advertising programme.
Who receives information
Our team uses enquiry information to respond to you. The website currently uses the following services:
- Cloudflare: website hosting, delivery and security, including Turnstile verification.
- Resend: delivery of contact-form emails to the Aseri team. These emails contain the enquiry fields you submit.
- Umami analytics infrastructure: collection and storage of website usage statistics at analytics.aseri.co.
Our email service also processes correspondence when we receive and reply to enquiries. Where necessary, information may be shared with professional advisers or an authority to meet a legal obligation or handle a legal claim.
International transfers
Our providers may process information outside the United Kingdom, including in the United States. The safeguards that apply depend on the provider, destination and terms governing the service.
Cloudflare’s published Data Processing Addendum and Resend’s published Data Processing Addendum include provisions for UK transfers using the UK Addendum to the EU Standard Contractual Clauses. These describe the providers’ terms; the arrangements applicable to Aseri must be confirmed before this policy is published.
Confirm before publication: identify the countries involved and the actual transfer arrangements for hosting, analytics, email delivery, team mailboxes. Replace this paragraph with the applicable UK adequacy regulations or contractual safeguards, and explain how people can obtain information about those safeguards by contacting us.
How long we keep information
Our retention periods for website information are:
- Enquiries and correspondence: 180 days. This includes enquiry copies held in team mailboxes.
- Security logs we control: 180 days.
- Website analytics: three years.
These periods cover the website and enquiry records described in this policy. If an enquiry becomes a client engagement, the resulting client project records fall outside this policy’s scope.
Where a specific legal obligation or an active legal claim requires particular records to be kept longer, we retain those records for the applicable statutory period or until the claim and any relevant limitation period have ended.
Providers may have their own retention periods for data they process as independent controllers. Their privacy information explains those periods; for Turnstile, see the Cloudflare Privacy Addendum linked above.
Cookies and similar technologies
Umami’s standard tracking script does not use analytics cookies. This does not mean that browsing the website involves no processing of personal information.
Cloudflare security services may use cookies or similar technologies depending on their configuration. Turnstile performs security checks in your browser. You can manage cookies through your browser settings; blocking security technology may affect the contact form. You can email info@aseri.co if you cannot use it.
Confirm before publication: check the live site’s cookies and browser storage, their purposes and lifetimes, and whether consent or an analytics opt-out is required for the actual configuration. Add the verified details and any applicable controls here.
Your rights
Depending on the circumstances and applicable law, you can:
- Ask for access to your personal information and a copy of it.
- Ask us to correct inaccurate information.
- Ask us to erase information or restrict how we use it.
- Object to processing based on legitimate interests.
- Receive certain information in a portable format where processing is automated and based on consent or a contract.
- Withdraw consent at any time where we rely on it, without affecting the lawfulness of earlier processing.
These rights have conditions and exceptions. Email info@aseri.co to make a request. We may need proportionate information to verify your identity. We will respond within the timeframe required by law and explain any applicable exception or extension.
Turnstile automatically checks whether a form submission may be automated. If it prevents you from sending an enquiry, you can contact us by email. We do not use website enquiries to make solely automated decisions that have legal or similarly significant effects on you.
Questions and complaints
If you are concerned about our handling of personal information, email info@aseri.co so we can investigate and respond.
You can also complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint or call 0303 123 1113. You can contact the ICO without first contacting us. If another data protection authority has jurisdiction over your complaint, you may contact that authority.
Changes to this policy
We will update this page when our website data practices change. The date at the top will show when the policy was last updated. Where required, we will bring material changes to your attention.