Privacy policy and cookie notice

1 The information we collect

What we collect depends on your relationship with us.

If you are a client or a prospective client, we may collect your name, job title, organisation, contact details, and the details of the project or requirement you ask us to help with.

If you visit our website, we may collect technical information such as your device and browser type, your approximate location, the pages you view, and information collected through cookies and similar technologies, as described below.

If you apply for a role with us, or come to us through our staffing and recruitment work, we may collect your name, contact details, curriculum vitae, work history, qualifications, eligibility to work, references, and anything else you choose to share that is relevant to a role.

We do not seek to collect sensitive personal information unless it is necessary and lawful for a specific purpose, for example information needed to confirm eligibility to work. Please do not send us special category information through this website unless we have asked for it.

2 How we collect your information

We collect information in several ways: directly from you, when you contact us, book a call, send us your details or speak with one of our team; from our clients, when they ask us to help with a project or a role; from publicly available professional sources, such as professional networking sites where people make their profiles available; and through our website, by means of cookies and analytics.

3 How and why we use your information

We use personal information to provide our services and to run our business. In particular, to understand and respond to an enquiry, to scope and deliver engagements, to support and operate the software we build, to maintain our relationships with clients and candidates, to improve our website and services, to keep our systems secure and investigate misuse, and to meet our legal, tax and regulatory obligations.

Where the UK or EU GDPR applies, we rely on these legal bases: our legitimate interests in running, securing and improving our business and responding to enquiries; the performance of a contract with you; your consent, where we ask for it, such as for analytics cookies and marketing messages; and compliance with a legal obligation.

Where India’s Digital Personal Data Protection Act 2023 applies, we process personal data for the lawful purposes described in this policy, on the basis of your consent or the other legitimate uses the Act permits. You may withdraw consent at any time, as described below.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

4 Data we handle for our clients

Building and operating software often means our engineers can access systems holding personal information about a client’s customers, staff or users. In that situation the client decides what happens to that data and we act on their instructions. In GDPR terms the client is the controller and we are the processor; under the DPDP Act the client is the Data Fiduciary and we are its Data Processor.

That work is governed by the contract signed with the client, including any data processing agreement, and not by this policy. If you believe your personal information sits inside a system we operate for a client, please contact that organisation first. If you cannot identify them, write to us and we will pass your request on.

5 Who we share your information with

We share personal information only as needed to provide our services and run our business:

• With service providers who help us operate, including hosting, email, analytics and scheduling, under appropriate confidentiality and data protection terms
• With clients, where you have approached us about work involving them, or where you are a candidate being put forward for a role, with your knowledge
• With professional advisers such as accountants, auditors and lawyers
• With authorities, where the law requires it or where we must establish or defend a legal claim
• With a buyer or successor, if the business or part of it is sold or reorganised

We do not sell your personal information and we do not share it for unrelated purposes.

6 International transfers

We operate from the United States and from India, and we work with clients across several markets. Your information may therefore be transferred to and processed in a country other than your own. Where information is transferred out of the UK or the European Economic Area, we put appropriate safeguards in place, ordinarily the UK International Data Transfer Agreement or the European Commission’s Standard Contractual Clauses.

7 How long we keep your information

We keep personal information only for as long as we need it for the purposes described here, and then for as long as we are required to keep records for tax, accounting or legal reasons. Enquiries that do not become projects are reviewed periodically and removed when they no longer serve a purpose. For candidates, this usually means keeping your details for as long as you may be interested in opportunities through us, after which we remove or anonymise them. Data held on behalf of a client is kept and deleted according to that client’s instructions.

You can ask us to remove your information at any time, as described below.

8 How we protect your information

We take the technical and organisational measures appropriate to a software engineering firm, including encryption of data in transit, access limited to the people who need it, multi-factor authentication on our own systems, and logging and review of access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9 Your rights

Depending on where you are and the law that applies, you have rights over your personal information. These may include the right to access the information we hold about you, to ask us to correct or update it, to ask us to delete it, to object to or restrict certain uses, to receive it in a portable form, to withdraw consent where we rely on it, and to complain to the relevant data protection authority.

If you are a California resident, you may also ask what categories of personal information we collected in the past twelve months, why we collected them and who we disclosed them to. We do not sell or share personal information as the CCPA defines those terms, and we will not discriminate against you for exercising a right.

To exercise any of these, contact us using the details below. We may need to verify your identity first, and we will respond in line with the applicable law.

10 Cookies and similar technologies

Our website uses cookies and similar technologies to function properly and to help us understand how the site is used. Cookies are small files placed on your device. We use them in two broad categories.

Necessary cookies, which are required for the website to work and cannot be switched off in our systems.

Analytics cookies, which help us understand how visitors use the site so we can improve it. These are not essential, and we set them only with your consent.

You can accept or decline non-essential cookies, and you can change your choice at any time through the cookie settings on this site or through your browser settings. Declining analytics cookies will not affect your ability to use the site.

11 Children

This website and our services are intended for professionals and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

12 Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. When we do, we will update the date at the top of this page, and where the changes are significant we will take reasonable steps to let you know.