What we keep about you

The CRM demo uses fictional people, companies and figures. Your changes to its customer records, notes, follow-ups and industry examples are saved in this browser. They are not uploaded or used to contact anyone. Use fictional details when adding a record. Reset an example or clear your browser site storage to remove your working copies.

Exporting the CRM records prepares a file on your device. Your demo records are not sent to our server to prepare that file. If browser saving is unavailable, changes remain available only for the current visit.

Private project workspaces store each saved revision and its audit record against your project. Access follows your project permissions. Read-only project grants have explicit scopes and an expiry; we store a hash of the secret and show the usable secret once. Revoking a grant or removing its issuer's access prevents further use.

Your guided estimate is calculated in your browser. Downloading the PDF sends your answers to our server to prepare the document; that request is not saved as an enquiry. Allowing measurement records the download, without your answers or figures.

If you press save, the answers and the figures are stored so the link keeps working. That record holds no name, no email address and no organisation. It is deleted after two years.

If you ask us to read a written brief, your paragraph is sent to Anthropic. Their commercial service does not use it for training by default. Their standard retention is up to thirty days, with exceptions for safety and legal obligations. Please leave out confidential or personal information that is not needed to describe your project.

Your conversation stays in your browser unless you ask us to follow up. What you type is sent to Anthropic to answer you, under the commercial retention and training arrangements described above.

Pressing Request more info is the point at which it is kept, along with your name and email address, so whoever replies can read what you already said instead of asking you to say it again. Nothing is kept if you do not press it.

Where a figure came out of the conversation, the answers behind it and the figures themselves are stored so the link keeps working. That record carries no name.

Your saved enquiry is reviewed for removal after three years without contact. If it becomes part of an engagement, relevant business records are kept for the engagement and any required accounting or legal retention period.

Your name, email address, and whatever else you chose to put in the form. It is kept so we can answer you and so we can find the conversation again later.

It is not added to a mailing list, because there is not one. You will get a reply, and nothing else unless you write again.

Your enquiry is reviewed for removal after three years without contact. Relevant accounting records are kept for at least six years from the financial year they relate to, and longer where required. This does not mean every enquiry has to be retained as an accounting record.

Your name, email address, which organisation you belong to, and a record of when you last signed in.

There is no password, because we do not use them. Signing in is a link sent to your address, which works once and expires after twenty minutes.

You can ask us to close your account and remove information that is no longer needed. Project, decision, invoice and audit records may need to be retained separately for contractual, accounting or legal reasons. We explain any information we need to keep when you ask.

Google Analytics is loaded only after you allow measurement using the line at the bottom of the page. Your account, studio pages, enquiry contents and saved estimate codes are excluded from the measurements we send.

You choose whether to enable optional measurement using the controls at the bottom of the page. Your preference is stored in your browser. With consent, Sep17 also records public page views, traffic sources, device categories and interactions using random visitor and session identifiers. Visitor identifiers expire after 30 days and session identifiers after 30 minutes of inactivity. Events are deleted after 90 days. We do not store IP addresses or form contents in these reports, and we respect your browser’s Do Not Track setting.

If you allow it, Google receives page and interaction measurements without the enquiry text or estimate answers you enter. You can turn it off again on the same line at any time.

Resend, who deliver our email, see the address a message goes to and its contents. They are used for sign-in links, enquiry notifications, project updates and communications sent by the studio. Marketing messages include a preference link.

Anthropic, who run the model behind the written-brief reader, assistant and optional engineering reviews, see the text you submit to those services.

Google, if and only if you have allowed us to measure your visit.

Your details are not sold, rented or passed to anyone for marketing. There are no advertising scripts; the optional measurement described above is the only visit tracking we use.

Your site records and project documents are hosted on our servers in Europe. Access is restricted to authorised accounts. Recovery copies are protected separately from the public site.

Email, optional measurement and the written-brief service may involve processing outside the UK or Europe. Their data-processing terms and safeguards apply to those transfers. You can ask us which services hold information about you.

A copy of everything we hold about you. A correction to anything wrong. Deletion of all of it. A stop to any particular use of it.

Email hello@sep17.co.uk and you will have it within thirty days, usually within a few. There is no charge and you do not have to give a reason.

If we get it wrong, you can complain to the Information Commissioner at ico.org.uk. Telling us first usually fixes it faster, and you are under no obligation to.