Privacy Policy.

1. Who we are

This website is operated by Rekognition Ltd (“Rekognition”, “we”, “us”), a branding studio registered in England & Wales. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), we are the data controller for the personal data described in this policy.

• Company: Rekognition Ltd — [company number]
• Registered address: [registered address], United Kingdom
• Contact: hello@rekognition.uk

2. What information we collect

We collect personal data that you actively give us, plus anonymous visit statistics. We do not build profiles of individuals. Specifically:

• Contact enquiries. When you use our contact form, we collect the name, email address and any details you include in your message so we can reply to you.
• Newsletter sign-ups. When you subscribe to “The Recognition”, we collect your email address so we can send you the newsletter.
• Brand systems waitlist. If you join the waitlist on our services page, we collect your email address and the task you chose as the one you'd most like taken off your plate.
• Booking a call. If you book a call on our contact page, we collect your name, email address, the time you picked and, if you add them, your company and what you'd like to talk about. Details are in the section below.
• Free brand health check. If you use the check on our brand check page, we collect the website address you enter and, if you unlock the full report, your email address and (optionally) your first name. Details are in the section below.
• Visit statistics. When a page loads, our own visit counter records the page, the date and time, the website or campaign link that sent you (for example “instagram.com”), and the type of device, browser and operating system. It turns your IP address and browser details into a scrambled code, so it can tell a new visitor from a returning one without knowing who you are. Your IP address itself is never saved. See section 4.

Booking a call

• Showing free times. The calendar on our contact page shows which half-hour slots are free. It reads our own work calendar to do that, but only “free” or “unavailable” ever reaches your browser. Nothing about you is recorded just by looking.
• When you book a time, we store your name, email address, the time, and your company and message if you gave them. Nathan gets the same details by email.
• When the call is booked, it is added to our Apple iCloud calendar with those details, and we email you the Zoom link with a calendar invite. Every email has a link to cancel.
• Abuse protection. To stop the form being misused, your IP address is turned into a scrambled code (never saved as an IP address) and kept for up to 3 days to count requests.

We use these details only to arrange and hold the call. Booking a call never adds you to a mailing list.

The free brand health check

Our brand health check is an automated tool. It does not use artificial intelligence, and nobody at Rekognition reads your website because you ran the check. In detail:

• The website address you enter. We fetch that public web page, and a few standard public files from the same site (such as robots.txt, sitemap.xml and llms.txt), to run the checks. We only read public pages, and we do not log in to anything.
• Your scores. The result is held temporarily so you can unlock it, and is deleted automatically after 24 hours.
• If you unlock the full report, we record your email address, your first name if you gave it, the website address, your scores and whether you ticked the newsletter box, and we are notified of this by email (through Web3Forms). We may follow up on your report. We will not add you to a marketing list unless you tick the newsletter box, which is never pre-ticked.
• Abuse protection. To stop the tool being overused, your IP address is turned into a scrambled code (never saved as an IP address) and kept for up to 3 days to count how many checks have been run.

The report is shown on screen and is not emailed to you. If you tick the newsletter box, your email address is also added to our newsletter list (held in a Google Sheet, see section 5).

Your web browser and our hosting provider may also process standard technical information (such as your IP address) to serve the site securely. This is a normal part of how any website works, and we never use it to identify you.

3. How we use your information & our legal basis

Under the UK GDPR we must have a lawful basis for using your data. We rely on the following:

• To respond to your enquiry — our legitimate interest in answering people who get in touch, and taking steps to enter into a contract at your request.
• To arrange a call you booked — taking steps at your request before any contract, and our legitimate interest in keeping a record of meetings.
• To run the brand health check and unlock your report — our legitimate interest in providing a free tool you asked for and in following up on the report you requested. Following up is limited to your report and our related services.
• To tell you when our brand systems are ready — your consent, given when you join the waitlist. We only email you about brand systems, and you can ask to be removed at any time.
• To send you our newsletter — your consent, given when you subscribe. You can withdraw it at any time using the unsubscribe link in any email, or by emailing us.
• To count visits: our legitimate interest in understanding how many people visit, which pages they read and how they found us, so we can improve the site. You can opt out at any time (see section 4).

We do not use your data for automated decision-making or profiling.

4. Cookies and visit statistics

This website does not use cookies, and it does not use third-party analytics, advertising or tracking tools. There are no Google Analytics, tag managers, advertising pixels or session recorders on this site. The one exception is a blog post that includes an embedded video (see Embedded videos below).

Our visit counter

We run a small visit counter of our own, on our own hosting, so we can see how many people visit and whether they found us through search, social media or another website. It works like this:

• It sets no cookies and reads nothing from your device. It only uses information your browser already sends with every page request.
• Your IP address and browser details are turned into a scrambled code on our server and then discarded. We can tell that the same browser came back, but not who you are.
• We record the page, the time, the site that referred you, any campaign tags in the link, and a general device type (mobile, tablet or desktop), browser and operating system.
• The data stays with us and our hosting provider. It is never shared, sold or combined with other data.
• If your browser sends a Global Privacy Control or Do Not Track signal, the counter does not run at all.

Separately, your browser remembers (in its own local storage, not a cookie) whether you closed our newsletter pop-up or turned off the visit counter, so we don't ask again. This stays on your device and is never sent to us.

Embedded videos

Some of our blog posts include a TikTok video, shown in TikTok’s own video player. When you open one of those posts, the video shows as a placeholder and nothing loads from TikTok until you press play. Pressing play loads TikTok’s player in your browser. From then on TikTok can set cookies and collect information such as your IP address and how you interact with the video, under TikTok’s own privacy policy. Other pages on this site don’t load anything from TikTok. You can block third-party cookies in your browser settings if you’d rather TikTok didn’t set any.

5. Third-party services we use

To run the site and handle your messages, we rely on a small number of reputable third-party providers. Where these providers process your data, they act as our processors or as independent controllers under their own privacy terms:

• Web3Forms — delivers the contact form, newsletter, brand systems waitlist and brand check lead notifications to our inbox. It processes the details you enter into those forms.
• Google (Google Sheets) — holds our newsletter subscriber list. Your email address is sent there only if you subscribe to the newsletter, including by ticking the box on the brand health check.
• Apple (iCloud Calendar) — holds our diary. When you book a call, it is added there with your name, email address and any company or message you gave.
• Zoom — hosts the video call itself, under Zoom's own privacy terms, if you join one.
• TikTok — serves any embedded TikTok video in our blog posts, when you press play on one. We decide whether to show the video; TikTok decides how it uses the data, under its own privacy policy (see Embedded videos).
• Our hosting provider — stores and serves the website files (including the fonts and animation code, so pages load nothing from Google Fonts or other code libraries), holds call booking records and sends our booking emails.

These providers may process data outside the UK. Where they do, they rely on appropriate safeguards (such as UK/EU-approved data transfer mechanisms) as set out in their own privacy policies.

6. How long we keep your data

We keep contact enquiries only as long as needed to deal with your request and for a reasonable period afterwards for our records. We keep your newsletter email address until you unsubscribe or ask us to remove it. We keep waitlist details until the brand systems launch and we have let you know, or until you ask us to remove them. Brand health check results are deleted after 24 hours. Brand check lead records (your email, website address and scores) are kept for up to 24 months, or until you ask us to delete them. Call bookings are deleted from our booking records 12 months after the call, and from our calendar on the same basis as our other meeting records. Abuse-protection codes are deleted after 3 days. Visit statistics are deleted automatically after 14 months.

7. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data (“the right to erasure”);
• object to, or ask us to restrict, our use of your data;
• withdraw consent at any time, where we rely on consent; and
• ask us to transfer your data to another provider.

To exercise any of these rights, email hello@rekognition.uk. We will respond within one month.

8. How we protect your data

The site is served over an encrypted (HTTPS) connection, and we choose reputable providers who apply their own security measures. No method of transmission over the internet is ever completely secure, but we take reasonable steps to protect the information you share with us.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “last updated” date at the top of this page.

10. How to contact us or complain

If you have any questions about this policy or how we handle your data, please email hello@rekognition.uk.

If you are unhappy with how we have handled your data, you have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to address your concerns first, so please do get in touch with us.