Your information, explained.

Who we are

Picadi Ltd is responsible for deciding how the personal information covered by this notice is used. This makes us its data controller.

For privacy questions or requests, email [email protected] or write to us at the address above.

This notice covers our website and initial business enquiries. If we work with you, our agreement will also explain the handling of project information. Where we process your organisation’s records on its behalf, its instructions and the agreed data processing terms apply.

Information we use

• Enquiries: your name, email address, organisation if supplied, enquiry type, area of interest, message and any follow-up correspondence. We also receive the selected service or licensing context and an internal submission reference.
• Website and security information: IP address, browser and device information, requested pages, request times and security-check results processed by our hosting and anti-spam services.

You provide enquiry information directly. Technical information is received when your browser requests the website or uses its security check. The form identifies optional fields. We need your name, email and a description of your requirement to handle an online enquiry; you can contact us by email instead.

Please do not send sensitive personal information, customer records, passwords or licence keys through the enquiry form. It has no file-upload facility.

Why we use it

Responding to enquiries and discussing work

Our lawful basis is our legitimate interest in responding to people who contact us, understanding their requirements and managing business relationships. If you are personally entering a contract with us, we may instead need the information to take steps you request before that contract, or to perform it.

Keeping the website and enquiry service secure

Our legitimate interest is to operate a reliable website, prevent spam and abuse, and investigate delivery or security problems.

Meeting legal requirements

We use information where necessary to meet a legal obligation, such as responding to a valid data protection request. We may also retain relevant correspondence for our legitimate interest in establishing or defending a legal claim.

Sending an enquiry does not subscribe you to marketing emails. The website does not use your enquiry to make solely automated decisions with legal or similarly significant effects. Automated security checks can block a suspected spam submission; email us if you cannot use the form.

Who handles it

People authorised to handle Picadi enquiries can access your message. We use these providers to run the website and deliver correspondence:

• Cloudflare: website hosting, request processing and Turnstile spam protection.
• Resend: delivery of the enquiry email, including its contents and delivery records.
• Microsoft 365: our enquiry mailbox and subsequent email correspondence.

These services process information on our behalf under their applicable processing terms. They may also process limited information for their own security or legal purposes, as described in their privacy notices. We may disclose relevant information to professional advisers or authorities where necessary to deal with a legal matter or meet a legal requirement.

The website does not keep a separate database of enquiry messages. The message is processed to send an email and is retained in the receiving mailbox and by delivery providers. We do not sell enquiry information.

International processing

Our providers operate internationally, so information can be processed outside the UK, including in the United States. Resend stores message content and delivery records in the US; selecting its Ireland sending region does not make this UK or EU-only storage.

The providers’ processing terms include international-transfer safeguards, such as standard contractual clauses with the UK Addendum. A UK adequacy arrangement may apply to eligible transfers. You can contact us for information about the safeguards relevant to your information or a copy of the applicable terms.

Read the Cloudflare processing terms,Resend processing terms andMicrosoft processing terms.

How long we keep it

For enquiries that do not become client work, we delete correspondence 12 months after the last meaningful contact. If relevant information is needed for an ongoing complaint, legal obligation or claim, we keep only what is necessary until that need ends. Enquiries that lead to work become part of the client record; their retention depends on the contract, applicable record-keeping requirements and any related legal claims.

Resend’s published retention for email and logs on our current plan is 30 days, with backup copies persisting for seven days. This is separate from the copy in our mailbox. Hosting and security providers also retain technical records under their service policies for operation, security investigations and legal requirements. SeeResend’s retention information andCloudflare’s privacy information.

You can ask us about retention or request deletion using the contact details above.

Cookies & security

We do not currently use advertising trackers or visitor analytics on this website. The site’s own code does not save enquiry details in cookies or browser storage.

Cloudflare helps deliver and protect the site. Turnstile loads when you interact with the available enquiry form and checks browser and device signals to distinguish people from automated abuse. It is used for security, not advertising. Turnstile pre-clearance, which can set a clearance cookie, is not enabled for our form.

See Cloudflare’s Turnstile privacy noticefor details. You can use email if you prefer not to load the form’s security check. Blocking scripts or necessary security features in your browser may prevent the form from working.

Videos & external services

The Laserfiche video is optional. Its preview image is served by this website; the external player is not loaded until you select “Load video”. Loading it connects your browser to Laserfiche, which receives technical information such as your IP address and browser details. The player can store playback preferences on your device, including volume, captions and playback speed.

You can leave the video unloaded and read the written overview instead. “Close video” removes the player from the page. This stops the embedded player but does not erase preferences it has already stored; use your browser’s site-data controls to clear those. Laserfiche’s privacy noticeexplains its handling of information.

Client Access links take you to external services, including Laserfiche and GoCardless. Their privacy notices apply when you visit them. You enter login or Direct Debit details on those providers’ sites, not on this website. GoCardless can share mandate information with Picadi so we can administer an agreed client payment arrangement.

Your rights

Depending on the circumstances, you can ask to access, correct or erase your personal information, restrict its use, or receive a portable copy. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.

Email [email protected] with your request. We may need proportionate information to verify your identity. We normally respond within one month; if a lawful extension applies, we will explain it. These rights are subject to the conditions and exceptions in data protection law.

If you have a concern, please contact us so we can look into it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.

We update this notice when our use of information changes. The date at the top shows when it was last revised.