greatfy.Business Automation

Legal

Privacy Policy

Last updated: 15 September 2026

This Privacy Policy explains how Greatfy (“Greatfy”, “we”, “us”) collects and uses personal data when you visit greatfy.io or contact us about our business process automation services. We are based in London, United Kingdom, and we act as the data controller for the personal data described here.

If you have any questions about this policy or how we handle your data, email us at hello@greatfy.io.

1. The data we collect

Information you give us

When you request an operational audit or custom plan through the form on our website, we collect:

  • your full name;
  • your business email address;
  • your company name;
  • the primary manual bottleneck you select, and any notes you choose to add;
  • if you used our savings calculator before submitting, the estimate you generated (team size, weekly hours, hourly rate and estimated savings).

We also collect any information you include when you email us directly.

Information collected automatically

When you visit the website, our hosting provider’s servers automatically record technical information such as your IP address, browser type, device information, the pages you visit and the date and time of your visit. This is standard server log data used to keep the website secure and working.

If you accept analytics cookies, we also use Google Analytics to understand how visitors use the website — for example which pages are viewed, how long visits last, roughly where visitors are located (country or city level), which device and browser they use, and which website, social media post or campaign brought them here. Google Analytics is only loaded after you click “Accept analytics”. We do not use advertising trackers.

2. How and why we use your data

Under UK GDPR and EU GDPR we must have a lawful basis for using your personal data. We use it as follows:

  • To respond to your enquiry and prepare your audit or proposal — because you have asked us to take steps before potentially entering into a contract with us, and in our legitimate interest in responding to business enquiries.
  • To deliver services if you become a client — to perform our contract with you.
  • To measure and improve the website and our marketing using Google Analytics — only with your consent, which you can withdraw at any time.
  • To keep the website secure and working properly — in our legitimate interest in protecting our systems and preventing abuse or spam.
  • To send occasional relevant updates to business contacts who have enquired about our services — in our legitimate interest in B2B marketing. You can opt out at any time by replying to any message or emailing us.
  • To meet legal, tax and accounting obligations — to comply with the law.

We do not sell your personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.

3. Cookies

Cookies are small files stored on your device. We use two kinds:

  • Strictly necessary — short-lived technical cookies used by our security and caching systems, and cookies set if you log in to the website administration area. We also store your cookie choice in your browser so we don’t ask again. These do not require consent.
  • Analytics (optional) — Google Analytics cookies (_ga and _ga_*), which last up to 2 years and help us see how the website is used. They are only set if you click “Accept analytics”.

We do not set advertising cookies. You can change your choice at any time using the “Cookie settings” link in the website footer. If you withdraw consent, Google Analytics stops loading and we remove its cookies from your browser. You can also block or delete cookies in your browser settings.

4. Who we share your data with

We only share personal data with trusted service providers who help us run our business, under contracts that require them to protect it:

  • Website hosting — Hostinger, which hosts this website and its server logs.
  • Email — our email provider, which delivers form notifications and our correspondence with you.
  • Website analytics — Google Analytics (Google Ireland Limited / Google LLC), only if you accept analytics cookies. We have not enabled Google Signals or advertising features, and we do not share analytics data with Google for advertising.
  • Web fonts — Google Fonts, which serves the typefaces used on this website. Your browser connects to Google’s servers to load them, which shares your IP address with Google.
  • Professional advisers — such as accountants or lawyers, where necessary.

If you become a client, we may process data within automation tools and platforms agreed with you as part of the project. That processing is covered by the agreement and Data Processing Agreement we sign with you.

We may also disclose data where required by law, or to protect our rights, property or safety.

5. International transfers

Some of our service providers (for example Google) may process data outside the UK and European Economic Area. Where this happens, we rely on appropriate safeguards such as UK adequacy regulations, the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

6. How long we keep your data

  • Enquiries that do not become projects: up to 24 months after our last contact, then deleted.
  • Client records: for the length of our relationship and up to 6 years afterwards, to meet legal and accounting obligations.
  • Google Analytics data: 14 months, then automatically deleted by Google.
  • Server logs: retained by our hosting provider for a limited period for security purposes.

7. How we protect your data

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), access controls and least-privilege credentials. No method of transmission over the internet is completely secure, but we work to protect your information and review our safeguards regularly.

8. Your rights

Under data protection law you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate or incomplete data;
  • ask us to delete your data;
  • object to or ask us to restrict how we use your data, including objecting to marketing at any time;
  • ask for your data to be transferred to you or another organisation (data portability);
  • withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email hello@greatfy.io. We will respond within one month. There is normally no fee.

9. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, or to the data protection authority in your country if you are in the EU.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page, with the “last updated” date shown at the top.