This Privacy Policy explains how SDTechnologist Ltd (“SDTechnologist,” “we,” “us,” or “our”) collects, uses, and protects your personal information when you visit sdtechnologist.com or use our services, including TechFlow CRM.
Who We Are
SDTechnologist Ltd is a private limited company registered in England and Wales.
- Company name: SDTechnologist Ltd
- Company number: 16262751
- Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
- US correspondence address: 2709 N Hayden Island Dr, STE 116051, Portland, Oregon, 97217, USA
- Privacy contact: [email protected]
SDTechnologist Ltd is the data controller responsible for your personal information under this Policy.
2. Information We Collect
We collect information in the following ways:
Information you provide directly:
- Contact form submissions (name, email, business details, message content)
- Quote and consultation requests
- TechFlow CRM account registration and usage data
- Email correspondence
Information collected automatically:
- IP address, browser type, device information
- Pages visited, time spent on site, referral source
- Cookies and similar tracking technologies (see our [Cookie Policy] for details)
Information from third-party tools:
- Analytics and advertising data via Google Analytics, Meta Ads Pixel, and Microsoft Clarity (see Section 5)
We do not knowingly collect information from children under 16.
3. How We Use Your Information
We use your information to:
- Respond to inquiries and provide quotes
- Deliver and support our services (AI & Automation, Web & App Development, Wikipedia & Content Authority) and TechFlow CRM
- Process payments (via Stripe)
- Improve our website and services through analytics
- Send service-related communications
- Comply with legal and accounting obligations
- Detect and prevent fraud or misuse
We do not sell your personal information to third parties.
4. Legal Basis for Processing (UK GDPR)
As a UK-registered company, SDTechnologist Ltd processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our legal bases for processing include:
- Consent — where you have opted in (e.g., marketing communications, non-essential cookies)
- Contract — where processing is necessary to deliver a service you’ve requested
- Legitimate interests — for site analytics, security, and business operations
- Legal obligation — for financial and accounting record-keeping
If you are located in the UK, you have the right to access, correct, delete, or restrict processing of your personal data, and to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.
5. Third-Party Tools and Processors
We work with the following third-party service providers, each of which processes limited data on our behalf:
| Provider | Purpose | Data Involved |
| Google Analytics | Website analytics | Usage data, IP address (anonymized where applicable) |
| Meta Ads Pixel | Advertising performance tracking | Usage data, device identifiers |
| Microsoft Clarity | Website behavior analytics (heatmaps, session recordings) | Usage data, interaction data |
| Stripe | Payment processing | Payment and billing information |
| Namecheap | Website hosting | Server logs, technical data |
Each provider processes data according to its own privacy policy and applicable data protection agreements. We do not store full payment card details — these are handled directly by Stripe.
6. Data Retention
We retain personal information only as long as necessary for the purposes described in this Policy:
- Contact form and inquiry data: retained for 24 months from your last interaction, then deleted or anonymized
- Client and service contract data: retained for the duration of the engagement plus 6 years, in line with UK financial record-keeping requirements
- TechFlow CRM account data: retained for the duration of your account, plus a reasonable period after account closure for legal and operational purposes
- Analytics data: retained according to each third-party tool’s default retention window (typically up to 26 months)
- Marketing communications: retained until you unsubscribe, plus a short processing period to action your request
7. Your Rights
If you are in the United Kingdom
You have the right to access, rectify, erase, restrict, or object to our processing of your personal data, and the right to data portability. Contact us at [email protected] to exercise these rights.
If you are in the United States
Depending on your state of residence, you may have rights under applicable state privacy laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), as well as similar laws in Virginia, Colorado, Connecticut, Utah, and other states. These rights may include:
- The right to know what personal information we collect and how it’s used
- The right to request deletion of your personal information
- The right to correct inaccurate personal information
- The right to opt out of the “sale” or “sharing” of personal information (see our “Do Not Sell or Share My Personal Information” link in the website footer)
- The right to non-discrimination for exercising your privacy rights
To exercise these rights, contact us at [email protected].
If you are in Canada
We process personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). If you are located in Quebec, additional rights apply under Quebec’s Law 25, including the right to meaningful consent for the collection of personal information and enhanced transparency around automated decision-making, where applicable.
To exercise your rights under PIPEDA or Law 25, contact us at [email protected].
8. International Data Transfers
Because SDTechnologist Ltd is a UK-registered company serving clients primarily in the United States and Canada, your personal information may be processed and stored outside your country of residence, including in the United Kingdom and the United States. Where required, we take appropriate steps to ensure such transfers comply with applicable data protection laws.
9. Data Security
We implement reasonable technical and organizational measures to protect your personal information, including encryption in transit, access controls, and secure hosting infrastructure. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Cookies
Our use of cookies and similar tracking technologies is described in detail in our Cookie Policy.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date at the top of this page. We encourage you to review this Policy periodically.
12. Contact Us
If you have questions about this Privacy Policy or how we handle your personal information, contact us at:
Email: [email protected] Registered address: 128 City Road, London, United Kingdom, EC1V 2NX US correspondence address: 2709 N Hayden Island Dr, STE 116051, Portland, Oregon, 97217, USA