1. Who we are

Neosmart Ltd designs and installs smart home and building automation systems across Manchester, Stockport and Cheshire. We are the data controller for the personal information described in this policy, which means we decide how and why it is used.

Neosmart Ltd is registered in England and Wales, company number 13289128. Registered office: 10a The Gate Centre, Bredbury Park Way, Stockport, England, SK6 2SN.

You can reach us at hello@neosmartcl.com or on 0161 706 1358.

2. What we collect

When you send an enquiry

The enquiry form asks for your name, email address, phone number (optional), the type of project, and whatever you choose to tell us about it. We store exactly those fields, together with the date and time of the submission and a randomly generated reference.

Please only include in the message what you are comfortable sharing. There is no need to send financial details, and we will never ask for them through this form.

Your IP address

Where our hosting is configured to pass it through, your IP address is used in two limited ways when you submit the form. It is converted into an irreversible fingerprint so that we can limit how many enquiries come from one connection in a short period, which is how we keep automated submissions under control; the fingerprint cannot be turned back into your address. It is also passed to Google as part of the reCAPTCHA check described in section 4. Your IP address is not stored alongside your enquiry.

Cookies

This site sets no cookies for ordinary visitors unless you accept them. Google’s analytics and advertising tag sets cookies only if you do. Whatever you choose, our staff content system sets a single sign-in cookie and Google’s reCAPTCHA sets its own. Our cookie policy covers all of them in detail, and explains how to change your answer.

Staff accounts

If you work for us and have an account in our content system, we hold your name, email address, password in hashed form, and a record of sign-ins that includes a hashed IP address and browser identifier. This is used to run the system securely and to keep an audit trail of changes.

3. Why we use it, and our lawful basis

UK data protection law requires us to have a lawful basis for using your information. Ours are as follows.

• To answer your enquiry and discuss a possible project. Our lawful basis is legitimate interests: you have approached us about work, and replying is what you are expecting. Where a project proceeds, we rely on performance of a contract.
• To keep the site secure and free of automated abuse. Our lawful basis is legitimate interests, namely protecting our systems and making sure genuine enquiries reach us.
• To see how this site is used and how well our Google advertising works. Our lawful basis is consent, which you give or refuse in the notice shown on your first visit and can withdraw at any time. Refusing has no effect on anything else here, and we do not treat an enquiry any differently either way.
• To meet our legal and accounting obligations. Our lawful basis is compliance with a legal obligation.

We do not use your information for automated decision-making or profiling, and we do not add enquirers to a marketing list. The advertising measurement above counts enquiries; it does not build an audience or follow you to other websites.

4. Google reCAPTCHA

The enquiry form is protected by Google reCAPTCHA, which distinguishes people from automated scripts. It is the only third-party service on this website.

When you use the form, reCAPTCHA collects information about your interaction with the page and your device and sends it to Google, which returns a score indicating how likely it is that you are a person. Where our hosting passes it through, your IP address is included in that check. Google acts as an independent controller for this processing. Their handling of it is governed by the Google Privacy Policy and Terms of Service.

We receive only the score and, where a submission is rejected, Google's reason for it. We keep a short technical record of rejections so that we can tell a genuine customer being turned away from an actual bot. That record contains no enquiry content.

If you would rather not use reCAPTCHA, you can contact us by email or telephone instead, using the details in section 12.

5. Who we share it with

We do not sell your personal information, and we do not share it with anyone for their own marketing.

• Google, for the reCAPTCHA check described above.
• Our hosting provider, EMT Hosting, which stores the site and its data on our behalf under a contract that limits them to acting on our instructions. EMT Hosting provides that service on infrastructure operated by 20i Limited, a United Kingdom company, which acts as a sub-processor.
• Professional advisers and authorities, where we are required to disclose information by law.

Where a project proceeds we may need to share relevant details with subcontractors or manufacturers working on it. We will tell you if that applies to your project.

6. Transfers outside the UK

Google operates globally, so the reCAPTCHA check may involve transferring information outside the United Kingdom, including to the United States. Google relies on safeguards approved for that purpose, including the UK extension to the EU-US Data Privacy Framework and standard contractual clauses. No other supplier we use stores enquiry information outside the United Kingdom.

7. How long we keep it

We keep enquiries for 24 months, after which they are deleted automatically. Where an enquiry becomes a project, the records that go with it are kept for as long as we need them for the work and then for the period our insurance and accounting obligations require.

The fingerprint used for rate limiting is held only briefly in memory and is not written to disk. Technical records of rejected submissions are kept only as long as we need them to diagnose a problem.

You can ask us to delete your enquiry sooner. See section 9.

8. How we protect it

Enquiries are stored on our own server rather than in a third-party marketing system. Access to the content system requires an account with a password, sessions expire after eight hours, sign-in attempts are rate-limited and changes are recorded in an audit log.

No system can be guaranteed secure, but if a breach occurs that is likely to put your rights at risk, we will tell you and the Information Commissioner's Office as the law requires.

9. Your rights

Under UK data protection law you have the right to:

• ask what personal information we hold about you, and get a copy of it;
• have inaccurate information corrected;
• ask us to delete it, where we have no continuing reason to keep it;
• ask us to restrict how we use it while a concern is resolved;
• object to our use of it where we rely on legitimate interests;
• receive it in a portable form, where that applies; and
• withdraw consent at any time, where we relied on consent.

To exercise any of these, email hello@neosmartcl.com. We will respond within one month. There is no charge.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would rather you raised it with us first so we can put it right.

10. Children

Our services are sold to adults and this site is not directed at children. We do not knowingly collect information about anyone under 18. If you believe a child has sent us their details, contact us and we will delete them.

11. Changes to this policy

We will update this policy when our practices change. The date at the top shows when it was last revised. Where a change materially affects how we use your information, we will take reasonable steps to tell you.

12. How to contact us

Neosmart Ltd
Email: hello@neosmartcl.com
Telephone: 0161 706 1358
Hours: Monday to Friday, 08:00 to 17:00

We are registered with the Information Commissioner's Office under registration number ZC109827.