IDENTETI LTD

Legal

Company information

Company name
IDENTETI LTD
Registered in
England & Wales
Company number
17506059
Registered office
7 Holmstall Parade, Burnt Oak Broadway, London, HA8 5HX

Privacy notice

Last updated: 30 October 2026

This notice explains what personal data IDENTETI LTD collects through identeti.com, why we use it, who we share it with, how long we keep it and the rights you have. We are the controller of that data.

Who we are

IDENTETI LTD is a company registered in England & Wales, company number 17506059. Our registered office is 7 Holmstall Parade, Burnt Oak Broadway, London, HA8 5HX. For anything about your data, email hello@identeti.com.

What we collect, and why

The "Get started" form in the footer. Your first and last name, your email address and the page you sent it from. We use them to reply to you.

The enquiry form at /contact. Your name, your email address, your company and your website if you give them, the services you choose, your budget band and timeline, your message and the page you sent it from. We use them to reply to you and to prepare for a call.

The brief at /start. Your answers (what you need, your budget and timeline, and what you tell us about your business), your name, your email address and, if you give it, your company. While you fill it in, your answers stay in your browser (see the cookie note below). When you complete the last question they are sent to us, before the calendar opens, so that we can prepare for the call, or reply if you don't book one.

Our confirmation. When you send the footer form, the enquiry form or the brief, we email you a confirmation from hello@identeti.com with a short summary of what you sent. Resend sends it for us.

Booking a call. The calendar is provided by Cal.com. It receives your name, your email address, the time you choose and a summary of your brief, which we pass to it as the booking's notes. Cal.com sends the confirmation and any reminders on our behalf.

Emailing us. We keep your email and our replies in our mailbox, which Google provides through Google Workspace.

Every visit. Our host, Cloudflare, receives your IP address, your browser's details and the pages you ask for, as any web server does. It handles them on our behalf, to deliver the site and keep it secure, and keeps records of these requests for a short time (see "How long we keep it"). Cloudflare also uses some of this information to protect its own network, for example to score IP addresses for threats, and for that it is a separate controller, under its own privacy policy.

Sending a form. To stop abuse, our server holds your IP address in memory for up to 24 hours to count requests. It is never written to our database.

We don't use your data for advertising, we don't sell it, and we make no decisions about you by automated means alone.

Our lawful basis

  • Replying to your enquiry or brief and arranging a call: taking steps you have asked for before a possible contract (UK GDPR Article 6(1)(b)), and our legitimate interest in answering the people who contact us (Article 6(1)(f)).
  • Server logs and request counts: our legitimate interest in keeping the site working and secure.
  • Records we keep once you are a client: our legal obligations, for example for tax.

Who we share it with

We use these providers to run the site. Each processes your data only on our instructions, under its data processing terms, except where Cloudflare protects its own network (see "Every visit"):

  • Cloudflare hosts the site and handles every request, including the forms.
  • Neon, a service of Databricks, Inc., is the database where enquiries and briefs are stored, in its London region.
  • Resend sends us an email notification of each enquiry, and sends you our confirmation of it.
  • Cal.com provides the booking calendar.
  • Google provides our email through Google Workspace: each enquiry's notification arrives there, and so does any email you send us.

We share your data with anyone else only where the law requires it.

Transfers outside the UK

Enquiries and briefs are stored in Neon's London region (AWS eu-west-2), so the database itself is in the UK. Each of our providers is, or belongs to, a company based in the United States, so the data it handles may also be processed there, and Cloudflare answers each request from its data centre nearest you, which may be outside the UK. Each transfer is protected as follows:

  • Cloudflare (hosting and the forms): Cloudflare, Inc. is certified under the UK Extension to the EU–US Data Privacy Framework (the UK–US "data bridge"). For any transfer the certification does not cover, including to its data centres in other countries, Cloudflare's data processing addendum applies the EU Standard Contractual Clauses with the UK Addendum.
  • Neon (the database): the data is stored in London, but Neon's support and operations may reach it from the United States. Neon is provided by its parent company, Databricks, Inc., which is certified under the UK Extension to the EU–US Data Privacy Framework (its certification covers Neon), and its data processing addendum includes the EU Standard Contractual Clauses with the UK Addendum.
  • Resend (the enquiry emails and our confirmations): Resend (Plus Five Five, Inc.) is certified under the UK Extension to the EU–US Data Privacy Framework, and its data processing addendum also includes the EU Standard Contractual Clauses with the UK Addendum.
  • Cal.com (bookings): Cal.com, Inc. is certified under the UK Extension to the EU–US Data Privacy Framework. Its data processing agreement, in force from 1 November 2026, also provides the EU Standard Contractual Clauses with the UK Addendum for any transfer the certification does not cover.
  • Google (our email, Google Workspace): Google Workspace is provided under Google's Cloud Data Processing Addendum. Where Google processes the data in the United States, the transfer relies on Google LLC's certification under the UK Extension to the EU–US Data Privacy Framework, with the EU Standard Contractual Clauses and the UK Addendum in those terms if that certification ever stops applying.

How long we keep it

  • Enquiries and briefs that don't lead to work: kept for 12 months, then deleted, from our database and from our mailbox.
  • If you become a client: your records are kept for as long as we work together, then for six years, for our tax and company records.
  • Bookings: kept in our Cal.com account for 12 months, then deleted.
  • Cloudflare's records of requests: the sampled records of requests to identeti.com that Cloudflare shows us, which include the IP address and browser, up to 31 days; Cloudflare's own security records, for as long as its privacy policy sets.
  • Request counts in memory: up to 24 hours.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, ask us to restrict how we use it or object to it, and ask to receive it in a portable form. Where we rely on our legitimate interests you can object at any time. To do any of these, email hello@identeti.com. We reply within one month, free of charge, and may ask you to confirm who you are.

Complaints

If you are unhappy with how we have handled your data, please tell us first at hello@identeti.com. We will acknowledge your complaint within 30 days and tell you what we have done about it. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this notice

If what we collect, or who we use, changes, we will update this page and the date at the top.

Cookies and storage

Last updated: 30 October 2026

identeti.com sets no cookies of its own and runs no advertising or analytics trackers, so there is no cookie banner.

What is stored on your device

  • Your brief, while you write it. The brief at /start keeps your answers in your browser's session storage, under the name identeti_brief_v1, so that a refresh or the back button doesn't lose them. It never leaves your device until you send the brief, and your browser deletes it when you close the tab. It is needed for the brief you chose to fill in, so it doesn't need your consent.
  • The booking calendar. On the brief's last step the calendar is Cal.com's booking page, shown inside ours. When it loads, Cal.com sets one cookie, __cf_bm, from the Cloudflare bot protection its site uses, which expires after 30 minutes (browsers that block third-party cookies, such as Safari, don't keep it). It also saves a random reference in your browser's local storage, which it uses to hold a time slot while you book, and in Chrome and Firefox it registers a small background script (a service worker) for its notifications. We found no advertising or analytics cookies. Cal.com explains its cookies in the Cookies section of its privacy policy: in its app, cookies for logging you in, remembering preferences and security, and no third-party advertising cookies.

Analytics

We don't use analytics.

Your choices

You can clear or block site data in your browser's settings. Blocking it doesn't stop the site working; the brief still works, but a refresh will lose your answers.