Privacy Policy
How SerSan collects, uses, and protects your personal data in compliance with GDPR.
Contents
1. Introduction
Sersan Limited (“we,” “our,” or “us”) — registered in England and Wales, Co. No. 16878386, at 128 City Road, London EC1V 2NX — is the data controller for personal data collected through this website. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you interact with our website, contact us, or engage us to build something.
2. Information We Collect
We may collect the following types of information:
- Personal Information: Name, email address, phone number, company name, and job title when you contact us or sign up for our services.
- Business Data: Information about your systems, technical priorities, delivery requirements, and project context.
- Usage Data: Information about how you interact with our platform, including analytics, performance metrics, and system logs.
- Communication Data: Records of correspondence when you contact us for support or inquiries.
3. How We Use Your Information
We use collected information to:
- Provide and improve our consulting, AI, and engineering services
- Customise proposals, delivery plans, and technical recommendations
- Communicate with you about the work in hand — marketing only with your consent, with an opt-out in every message
- Analyse usage patterns to enhance platform performance
- Comply with legal obligations and protect our rights
Legal bases (GDPR Art. 6): delivering an engagement and the steps leading to it — Art. 6(1)(b), contract; security, audit logging and service improvement — Art. 6(1)(f), legitimate interests; replying to you and following up on an enquiry you started — Art. 6(1)(b) and 6(1)(f); marketing communications — consent, to opted-in business contacts only, with an opt-out in every message; the language-preference cookie — strictly necessary for a setting you chose yourself, so it is exempt from consent, and our analytics sets no cookies at all.
5. Data Security
We implement industry-standard security measures to protect your data, including encryption, secure servers, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your information only as long as the purpose requires. Lead data is retained for 24 months from last contact, then purged. Engagement data is deleted within 30 days of contract end, unless the DPA specifies a longer regulatory hold. Hiring data is retained for 6 months unless the candidate consents to a longer hold. Contractual and accounting records are kept for as long as UK company and tax law requires. You may request deletion of your data at any time.
7. Your Rights
Depending on your location, you may have the right to:
- Access and receive a copy of your personal data
- Rectify inaccurate or incomplete information
- Request deletion of your personal data
- Object to or restrict processing of your data
- Data portability
- Withdraw consent at any time
Email us to exercise any of these; we respond within 30 days. Where we process data on a client's instructions, we route the request to that client and tell you we have. You can also complain to the ICO (UK) or the Garante per la protezione dei dati personali (Italy).
9. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a revised “Last updated” date.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Sersan Limited
128 City Road, London, EC1V 2NX, United Kingdom
Company No. 16878386
Email: alex.s@sersan.dev
Related documents