Privacy Policy

1. Introduction

Numen Technology ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website numentechnology.co.uk and use our services.

Company Details:
Numen Technology
Company No. 13262519
Registered in England and Wales
Numen Technology Limited, 86-90 Paul Street, London, United Kingdom, EC2A 4NE

2. Information We Collect

2.1 Personal Information You Provide

When you submit our contact form, we collect:

• First name and last name (required)
• Email address (required)
• Company name (optional)
• Phone number (optional)
• Message/inquiry details (optional)

2.2 Automatically Collected Information

Vercel Analytics and Speed Insights: We use Vercel Analytics and Speed Insights to understand website usage and performance. These services collect anonymous, aggregated data including:

• Page views and navigation patterns
• Referral sources (where visitors came from)
• Device type and browser information
• Geographic location (country/region level only)
• Website performance metrics (Core Web Vitals: page load speed, interactivity, visual stability)

Both Vercel Analytics and Speed Insights are privacy-friendly and do not use cookies or track individual users across websites. No personally identifiable information is collected. Learn more at: Vercel Analytics Privacy Policy and Vercel Speed Insights Privacy Policy

Server Logs: Our hosting provider (Vercel) automatically collects certain technical information for security, performance monitoring, and troubleshooting purposes:

• IP addresses (anonymized after 7 days)
• Browser type and version
• Operating system
• Pages visited and time spent
• Date and time of access
• Referring website addresses

Legal Basis: Legitimate interest in maintaining security, preventing abuse, and ensuring proper website functionality. Server logs are retained for up to 30 days and then automatically deleted.

3. How We Use Your Information

3.1 Contact Form Data

We use the information you provide through our contact form for the following purposes:

• To respond to your inquiries and provide customer support
• To communicate with you about our services
• To process and manage business relationships
• To comply with legal obligations

Legal Basis: We process your data based on your consent (when you submit the form) and our legitimate business interests in responding to inquiries and providing services.

3.2 Cookie Data

We use cookies and similar tracking technologies for the following purposes:

• Essential Cookies: To remember your cookie preferences and enable core website functionality
• Analytics Cookies: To understand how visitors interact with our website, identify popular content, and improve user experience
• Marketing Cookies: To deliver personalized advertising, measure ad performance, and enable retargeting

Legal Basis: Essential cookies are necessary for the website to function (legitimate interest). Analytics and marketing cookies are only set with your explicit consent, which you can withdraw at any time.

4. Third-Party Data Processing

We work with trusted third-party service providers to help us deliver our services. All our data processors are GDPR-compliant and have signed Data Processing Agreements (DPAs) with us to protect your data.

4.1 HubSpot (CRM and Analytics)

We use HubSpot for two purposes:

• Contact Form Storage (No consent required): When you submit our contact form, your information is sent to and stored in HubSpot CRM, our customer relationship management system. This is necessary to respond to your inquiry.
• Website Analytics (Requires analytics consent): With your analytics consent, HubSpot tracking code monitors website visitor behavior, page views, and form interactions to help us improve user experience.

Data Location: EU data center (GDPR-compliant)
Cookies Set: hubspotutk, __hstc, __hssc, __hssrc (only with analytics consent)
Privacy Policy: HubSpot Privacy Policy

4.2 Analytics and Advertising Services

With your consent, we use third-party analytics and advertising services to understand website usage and deliver relevant advertising. These services only load if you accept analytics or marketing cookies.

4.3 Hosting

Our website is hosted on Vercel, which may process technical data (such as IP addresses) for the purposes of delivering the website. Vercel is GDPR-compliant and participates in the EU-US Data Privacy Framework.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data Deletion: When the retention period expires, we securely delete or anonymize your personal data. You can also request early deletion by exercising your "Right to Erasure" (see Section 6).

Legal Hold: In some cases, we may be legally required to retain data for longer periods (e.g., ongoing legal proceedings, regulatory investigations, or tax audits). We will inform you if this applies to your data.

6. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA) or UK, you have the following data protection rights:

• Right to Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request that we correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format
• Right to Object: You can object to our processing of your personal data
• Right to Withdraw Consent: You can withdraw your consent at any time (e.g., through our cookie settings)
• Right to Lodge a Complaint: You can file a complaint with the Information Commissioner's Office (ICO) if you believe your rights have been violated

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

7.1 Security Measures

Our security measures include:

• Encryption in Transit: All data transmissions use HTTPS/TLS 1.3 encryption
• Encryption at Rest: Data stored by our third-party processors (HubSpot, Google, Microsoft) is encrypted
• Access Controls: Strict access controls limit data access to authorized personnel only
• Regular Updates: We maintain up-to-date software and security patches
• Secure Development: Environment variables for API keys, no sensitive data in code repositories
• Third-Party Security: All data processors are ISO 27001 and/or SOC 2 certified

7.2 Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we are committed to transparency and swift action in accordance with UK GDPR requirements.

What We'll Tell You: If we are required to notify you of a breach, our notification will include:

• The nature of the personal data breach
• The categories and approximate number of data subjects affected
• The likely consequences of the breach
• The measures we have taken or propose to take to address the breach
• Contact details for our privacy team (privacy@numentechnology.co.uk)
• Recommendations for steps you can take to protect yourself (if applicable)

Your Right to Report: If you believe a breach has occurred or have concerns about how we handled a breach, you can report it directly to the ICO at ico.org.uk/make-a-complaint

8. International Data Transfers

Your data may be transferred to and processed in countries outside the EEA/UK. When we do so, we ensure appropriate safeguards are in place.

9. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal data, please contact us.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

12. Complaints

If you believe we have not handled your personal data in accordance with applicable data protection laws, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):