Privacy.

Who's responsible

Cowl is built and operated by DoneOps, which is the data controller for anything you send through this site.

Our registered company number and registered office address are being added here before launch. We'd rather leave this visibly incomplete than fill it with something approximate. If you need those details now, ask through the form and we'll send them.

Anything about this page, or about your own data, goes through the form on our home page. Pick "a privacy or data request" and tell us what you need. We don't publish an email address, so that form is the way in, and it reaches a person either way.

What we collect

One thing: what you type into the form. Your name and your email address, which we need in order to reply, and what your message is about, which the form always sends. Then, only if you fill them in, your agency's name, which ATS you run, and the message itself. It reaches us through Netlify Forms. That's the entire list. And if you add a field to that form, it belongs in this sentence too.

What we don't collect

We run no analytics on this site. No Google Analytics, no tracking pixels, no advertising tags, no session recording, no fingerprinting. We setno cookies at all. SeeCookies. We don't track you across sites and we never sell or share your data.

Why we're allowed to hold it

If you're asking about the product, our lawful basis is legitimate interest (UK GDPR Article 6(1)(f)): you asked a business a question, and we reply. We use your details to respond and to arrange a call. We don't add you to a marketing list off the back of it.

If you're using the form to ask about your own data, we're handling that under legal obligation (Article 6(1)(c)). We have to answer, and we'll only use what you send to find you in our records and reply.

Who else sees it

One processor: Netlify, which hosts this site and receives the enquiry form. That's the only third party involved. There's no CRM, no email marketing tool, and no analytics provider in the chain.

Where it goes

Netlify is a US company, so your enquiry may be stored or processed outside the UK. That transfer is covered by the Standard Contractual Clauses in Netlify's data processing agreement, which is the safeguard UK GDPR requires for a transfer like this. Ask through the form and we'll send you a copy of the relevant terms. It's usually a name, an email and a short message rather than anything sensitive, though the message box is free text and it's yours to fill as you like. Either way you're entitled to know it crosses a border, and on what basis.

How long we keep it

Enquiries are kept for up to 24 months from our last contact, then deleted. Ask us sooner and we'll delete it sooner.

Keeping it safe

The site is served over HTTPS only, with a strict content security policy and no third-party scripts of any kind. There's nothing running here that could read what you type. Submissions are visible to the small number of people who need to reply to you, and nobody else.

No profiling, no decisions by machine

We don't profile you, we don't score you, and nothing here makes an automated decision about you. A person reads your enquiry and a person replies to it.

Your rights

Under UK and EU GDPR you can ask us to give you a copy of your data, correct it, delete it, hand it over in a portable format, or stop using it. Use the form and pick "a privacy or data request". Only your name and an email to reply to are required, so you don't have to tell us anything about your company to ask us about your own data. We'll respond within 30 days. If you think we've got it wrong you can complain to the UK Information Commissioner's Office atico.org.uk.

Contact

The form on our home page. It's the only way to reach us. There's no email address on this site on purpose, and a real person reads every submission.

Cowl is at an early stage. This notice covers the website and the enquiry form, which is all we currently collect from you. The separate terms covering the product itself are agreed in writing before any engagement begins.