We use the data we collect to:

• respond to your enquiries and provide information about our products and services;
• manage our relationship with you, including communications managed through HubSpot;
• send you marketing communications where you have opted in or where we rely on the legitimate interest soft opt-in under PECR;
• analyse Website traffic and user behaviour using GA4 to improve the Website;
• measure the effectiveness of advertising campaigns via Google Ads and LinkedIn Ads;
• retarget Website visitors with relevant advertising on Google and LinkedIn, subject to your cookie consent;
• maintain Website security and prevent fraud; and
• comply with our legal and regulatory obligations.

6. Third-Party Processors and Data Sharing

We work with trusted third-party service providers who act as data processors on our behalf. These currently include:

• HubSpot, Inc. – CRM, marketing automation and form processing. Data may be transferred to the United States under HubSpot’s Data Processing Agreement and Standard Contractual Clauses.
• Google LLC – GA4 for website analytics; Google Ads for advertising. Data may be transferred to the United States under Google’s Data Processing Terms and Standard Contractual Clauses.
• LinkedIn Ireland Unlimited Company – LinkedIn Ads and Insight Tag for advertising and conversion tracking. Data is processed in accordance with LinkedIn’s Data Processing Agreement.
• CookieYes – cookie consent management platform.
• Our website hosting and IT infrastructure providers.

We may also disclose personal data where required by law, to protect our legal rights, in connection with a business sale or restructuring, or with your consent. We will never sell your personal data for third-party marketing purposes.

7. International Data Transfers

Some of our third-party processors operate outside the UK. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, which may include:

• Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTAs) approved by the UK ICO; or
• a UK Government adequacy decision in respect of the destination country.

For further information about the safeguards applicable to specific transfers, please contact us.

8. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law:

• Enquiry and contact data – up to 3 years from last contact, unless you become a customer.
• Customer data – up to 7 years from the end of the commercial relationship, for accounting and legal purposes.
• Marketing data – until you unsubscribe or withdraw consent, or 2 years from last engagement, whichever is sooner.
• Website analytics data – as configured within GA4 (typically up to 14 months for user-level data).

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access – to request a copy of the data we hold about you, free of charge.
• Right to rectification – to request correction of inaccurate or incomplete data.
• Right to erasure – to request deletion of your data in certain circumstances.
• Right to restrict processing – to ask us to pause processing of your data.
• Right to data portability – to receive your data in a structured, machine-readable format.
• Right to object – to object to processing based on legitimate interests, including direct marketing.
• Rights related to automated decision-making – we do not make solely automated decisions about you.

To exercise any of these rights, please email enquiries@bytronic.com. We will respond within one calendar month. No fee is charged for exercising your rights.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Marketing Communications

We may send marketing emails where you have subscribed or opted in, or where you are an existing contact and we are marketing similar products or services (the ‘soft opt-in’ under the Privacy and Electronic Communications Regulations 2003 (PECR)). Every marketing email will include an unsubscribe link. You may also opt out by emailing enquiries@bytronic.com.

Marketing preferences are managed through HubSpot and will be respected across all our communications.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration, including HTTPS encryption, access controls and regular security reviews.

While we take all reasonable steps, the transmission of data over the internet carries inherent risk, which you acknowledge by using the Website.

12. Children

This Website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us so we can delete it.

13. Third-Party Websites

The Website may contain links to third-party websites. We are not responsible for the content or privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last updated. Where changes are material, we will notify you by email or via a prominent notice on the Website.

15. Contact and Data Controller Details

Bytronic Automation Limited, trading as Bytronic Vision Intelligence, is the data controller for personal data collected through this Website.

For any data protection queries, to exercise your rights, or to raise a concern, please contact us:

Email: enquiries@bytronic.com

Post: Bytronic Automation Limited, Innovation Campus, 33 Greenhill, Blackwell, Bromsgrove, B60 1BL