Skip to main content
Legal

Privacy Policy

Last updated: 14 March 2026
Section 01

Who We Are

ReadyLayer Ltd ("ReadyLayer", "we", "us", "our") is the data controller responsible for personal data collected through this website (www.readylayer.com) and its associated services.

Registered in England and Wales.
Registered address: [REGISTERED ADDRESS]
ICO registration number: [ICO REGISTRATION NUMBER — to be added before launch]
Privacy enquiries: [PRIVACY EMAIL]

Scope of this policy. This policy applies to personal data collected via this website, including through our contact and enquiry forms, newsletter subscription, and website analytics. It does not govern data processed under separate contractual agreements with consulting clients.

Section 02

Personal Data We Collect

Data you provide directly

When you complete the contact or enquiry form, or subscribe to our newsletter, we may collect:

  • First name and last name
  • Work email address
  • Company name and your role within it
  • Information you provide in the free-text fields of the enquiry form (such as your AI readiness situation, objectives, or timeline)

Data collected automatically

When you visit this website, certain technical data is collected automatically by our analytics and behaviour-tracking tools, including:

  • IP address (anonymised where required)
  • Browser type and version
  • Device type and operating system
  • Pages visited, time on page, and navigation path
  • Referral source (how you arrived at the website)
  • Approximate geographic location (country or region level, derived from IP address)
  • Interactions with page elements (scroll depth, click events — collected by Hotjar)

We do not collect sensitive personal data (as defined under UK GDPR Article 9) through this website.

Section 03

How We Collect Personal Data

We collect personal data through the following means:

  • Directly from you — when you complete a form on this website or subscribe to our newsletter.
  • Automatically via cookies and tracking technologies — through Google Tag Manager, Google Analytics 4, and Hotjar, which are activated in accordance with your cookie preferences. See our Cookie Policy for full details.
  • Via HubSpot — our CRM platform, which processes contact form submissions and manages newsletter communications. HubSpot may also set tracking cookies on your device, subject to your cookie consent.
Section 04

Lawful Basis for Processing

We process personal data only where we have a lawful basis to do so under UK GDPR. The applicable bases are as follows:

Consent — analytics and behaviour tracking We rely on your consent (UK GDPR Article 6(1)(a)) for the placement of non-essential cookies and the associated processing of data by Google Analytics 4, Hotjar, and HubSpot tracking functions. You may withdraw consent at any time via our cookie settings.
Consent — newsletter communications We rely on your consent for sending newsletter and resource-release emails. You may unsubscribe at any time using the link in any email we send.
Legitimate interests — enquiry handling We rely on legitimate interests (UK GDPR Article 6(1)(f)) to process data submitted via the contact form, to the extent necessary to respond to and manage your enquiry. We have assessed that this processing does not override your fundamental rights and freedoms.
Legal obligation Where we are required by law to retain or process personal data, we do so on the basis of legal obligation (UK GDPR Article 6(1)(c)).
Section 05

How We Use Personal Data

We use the personal data we collect for the following purposes:

  • To respond to enquiries submitted via our contact form and to progress any resulting engagement
  • To send newsletter and resource-release emails to subscribers who have opted in
  • To understand how visitors use this website and to improve its content and performance (via Google Analytics 4)
  • To understand user behaviour and identify usability issues (via Hotjar)
  • To manage contact records and communications in our CRM (HubSpot)
  • To comply with applicable legal obligations

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Section 06

Third-Party Data Processors

We share personal data with the following third-party processors, each of whom processes data only on our behalf and in accordance with our instructions:

Google LLC — Google Tag Manager & Google Analytics 4 Google Tag Manager is used to manage and deploy tracking scripts. Google Analytics 4 is used to collect anonymised website usage data. Google LLC is based in the United States; data transfers are governed by the UK International Data Transfer Agreement (IDTA) / Standard Contractual Clauses. Privacy policy: policies.google.com/privacy.
Hotjar Ltd — Behaviour analytics Hotjar is used to collect anonymised session recordings, heatmaps, and interaction data. Hotjar Ltd is based in Malta (European Economic Area); data processed within the EEA does not constitute an international transfer under UK GDPR. Privacy policy: hotjar.com/legal/policies/privacy.
HubSpot Inc — CRM & email communications HubSpot is used to receive and manage contact form submissions, to send newsletter and resource emails, and to maintain contact records. HubSpot Inc is based in the United States; data transfers are governed by the UK IDTA / Standard Contractual Clauses. Privacy policy: legal.hubspot.com/privacy-policy.

We do not sell personal data to third parties. We do not share personal data with third parties for their own marketing purposes.

Section 07

International Data Transfers

Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place as required by UK GDPR Chapter V. Specifically:

  • Transfers to Google LLC and HubSpot Inc (United States) are made under the UK International Data Transfer Agreement (IDTA) or UK-approved Standard Contractual Clauses, in each case supplemented by a Transfer Impact Assessment where required.
  • Transfers to Hotjar Ltd (Malta, EEA) are made to a country covered by the UK's adequacy regulations and do not require additional safeguards.

You may request a copy of the relevant transfer safeguards by contacting us at [PRIVACY EMAIL].

Section 08

Retention Periods

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law.

  • Enquiry form data — retained for 24 months from the date of submission, or for the duration of any resulting business relationship, whichever is longer. After this period, records are deleted or anonymised.
  • Newsletter subscriber data — retained until you unsubscribe or request deletion, whichever occurs first.
  • Website analytics data (GA4) — retained for 14 months in Google Analytics, in accordance with our account settings.
  • Hotjar session data — retained for 365 days in accordance with Hotjar's default retention settings.
  • HubSpot CRM records — retained in line with the enquiry or newsletter retention periods above.
Section 09

Your Rights Under UK GDPR

You have the following rights in relation to personal data we hold about you. To exercise any of these rights, please contact us at [PRIVACY EMAIL]. We will respond within one calendar month.

Right of access You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to rectification You have the right to request correction of inaccurate or incomplete personal data we hold about you.
Right to erasure You have the right to request deletion of your personal data where there is no compelling reason for its continued processing.
Right to restriction of processing You have the right to request that we restrict processing of your personal data in certain circumstances.
Right to data portability Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to object You have the right to object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims.
Right to withdraw consent Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

If you are dissatisfied with our response or believe we are processing your data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113.

Visitors located in the European Economic Area may also have rights under the EU GDPR and may contact their local supervisory authority.

Section 10

Cookies

This website uses cookies and similar tracking technologies. Full details of the cookies we use, their purposes, and how to manage your preferences are set out in our Cookie Policy.

Section 11

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we use. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated via a notice on this website.

We encourage you to review this policy periodically.

Section 12

Contact

For any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact us:

ReadyLayer Ltd
[REGISTERED ADDRESS]
Email: [PRIVACY EMAIL]