Skip to content

Privacy Policy

Effective date: 17 June 2026 · Last updated: 17 June 2026

1. About this policy

This Privacy Policy explains how NUMBER PII LTD ("Number Pii", "we", "our", "us") collects, uses, shares, and protects personal data when you visit numberpii.com (the "Website"), contact us through the enquiry form, or engage us for development and consultancy services.

We are the data controller responsible for your personal data. This policy applies to the Website and to our business communications with you. Our software products, including Thirty X and CalyPad, are governed by their own separate privacy notices and terms.

We are committed to handling personal data in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who we are

  • Controller: NUMBER PII LTD
  • Company number: 17123617 (registered in England and Wales)
  • Registered office: 86-90 Paul Street, London, EC2A 4NE, United Kingdom
  • Data protection contact: legal@numberpii.com

We are working towards registration with the Information Commissioner's Office (ICO) as a fee-paying data controller. We will publish our registration reference here once it is confirmed.

3. The personal data we collect

We collect only the data we need to respond to you and to run our business. The categories below reflect what the Website actually collects today.

Data you provide through the enquiry form

When you submit our contact and consultation form, we collect:

  • Your name
  • Your email address
  • Your company name (optional)
  • The services you are interested in
  • Your indicated budget range (optional)
  • How you heard about us (optional)
  • Any details you choose to include in the free-text message

Please share only what is necessary in the message field, and avoid including sensitive personal data (for example health, financial account, or special category data) unless we specifically ask for it.

Data collected automatically

When you browse the Website, our analytics provider may collect technical and usage data, such as your approximate location, device and browser type, the pages you view, and how you arrived at the Website. This data is collected through cookies and similar technologies, and only where you have given consent. See section 8 for detail.

We do not operate user accounts, take payments, or run a newsletter on this Website, so we do not collect login credentials, payment card data, or marketing subscription data here.

4. How we use your data and our lawful bases

Under UK GDPR we must have a lawful basis for each use of your personal data. Our uses and bases are:

  • Responding to your enquiry and arranging a consultation: to read your message, contact you, and discuss your needs. Lawful basis: our legitimate interests in responding to people who contact us, and, where you ask us to provide services, taking steps at your request before entering a contract.
  • Providing development and consultancy services: to deliver work you engage us for and manage our relationship with you. Lawful basis: performance of a contract, and our legitimate interest in running our business. Specific engagements are also governed by a separate agreement or statement of work.
  • Marketing communications: where the enquiry form invites you to allow us to use your details for marketing, and you opt in, we may send you relevant updates. Lawful basis: consent. You can withdraw consent at any time (see section 6).
  • Website analytics: to understand how the Website is used and to improve it. Lawful basis: consent, given through our cookie controls.
  • Security, record keeping, and legal compliance: to protect the Website against misuse, keep business records, and meet legal obligations. Lawful basis: our legitimate interests and compliance with a legal obligation.

Where we rely on legitimate interests, we have considered your rights and have concluded that our use does not override them. You can ask us for more detail about this assessment at any time.

5. We do not sell your data

We do not sell your personal data, and we do not share it with third parties for their own marketing. We do not use your data for automated decision-making that produces legal or similarly significant effects.

6. Marketing and your choices

We will only send you marketing messages if you have opted in. Every marketing email includes an easy way to opt out, and you can withdraw consent at any time by emailing legal@numberpii.com. Withdrawing consent does not affect our ability to contact you about an enquiry you have made or a service we are providing to you.

7. Who we share your data with

We share personal data only with service providers who process it on our behalf under contract, and with others where the law requires or permits it. Our main providers are:

  • Resend (Resend, Inc.): delivers enquiry-form submissions to our inbox as email.
  • Google Analytics (Google): provides website analytics, where you have consented.
  • Vercel (Vercel, Inc.): hosts the Website and runs the form-handling function.

We may also share data with our professional advisers (for example lawyers and accountants), with authorities or regulators where we are legally required to do so, and with a successor organisation if our business is reorganised, sold, or transferred. In that case we will require the recipient to protect your data in line with this policy.

8. Cookies and analytics

Cookies are small files placed on your device. We use a small number of cookies, and we group them as:

  • Strictly necessary: needed for the Website to function and to remember your cookie choices. These do not require consent.
  • Analytics:set by Google Analytics (for example cookies beginning with "_ga") to measure how the Website is used. These are set only if you consent.

Because analytics cookies are not strictly necessary, we ask for your consent before they are set, in line with the Privacy and Electronic Communications Regulations (PECR). You can change or withdraw your choice at any time through our cookie controls, and you can also block or delete cookies in your browser settings. Blocking some cookies may affect how the Website works.

For information on how Google handles analytics data, see Google's privacy policy.

9. International transfers

Some of our service providers are based outside the United Kingdom, including in the United States. Where your personal data is transferred outside the UK, we make sure it is protected by an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for a copy of the relevant safeguard by emailing legal@numberpii.com.

10. How long we keep your data

We keep personal data only for as long as we need it for the purposes set out in this policy, and then we delete or anonymise it. As a guide:

  • Enquiries that do not lead to an engagement: up to 24 months after our last contact, so we can follow up and keep a record of the conversation.
  • Records relating to a service engagement: for the duration of the engagement and for up to 6 years afterwards, to meet legal, tax, and accounting obligations.
  • Marketing consent records: for as long as you remain opted in, plus a short period afterwards to evidence your choice.
  • Analytics data: for the retention period set in our analytics configuration, after which it is deleted or aggregated.

11. How we protect your data

We take appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. These include:

  • Encryption of data in transit using HTTPS across the Website
  • Validation of form submissions and a honeypot control to reduce spam and abuse
  • Limiting access to enquiry data to people who need it
  • Using reputable service providers who are themselves contractually bound to protect your data
  • Collecting only the data we need (data minimisation)

No method of transmission or storage is completely secure. If we become aware of a personal data breach that is likely to risk your rights and freedoms, we will notify the ICO and, where required, you, in line with our legal obligations.

12. Your rights

Under UK data protection law you have the following rights, which you can exercise free of charge in most cases:

  • Access: to be told whether we hold your data and to receive a copy of it.
  • Rectification: to have inaccurate or incomplete data corrected.
  • Erasure: to have your data deleted in certain circumstances.
  • Restriction: to limit how we use your data in certain circumstances.
  • Portability: to receive certain data in a portable format, or have it sent to another controller.
  • Objection: to object to processing based on our legitimate interests, and to object to direct marketing at any time.
  • Withdraw consent: to withdraw consent at any time where we rely on it, without affecting earlier processing.

To exercise any of these rights, email legal@numberpii.com. We will respond within one month, and may extend this by up to two further months for complex requests, in which case we will tell you. We may ask you to confirm your identity before we act on a request.

13. Complaints

If you have a concern about how we handle your personal data, please contact us first at legal@numberpii.comso we can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

14. Children

The Website and our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

15. Third-party links

The Website may link to third-party websites, including our product sites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy notices before sharing personal data with them.

16. Changes to this policy

We may update this policy from time to time to reflect changes in how we work or in the law. When we do, we will update the "Last updated" date above. If the changes are significant, we will take reasonable steps to bring them to your attention.

17. Contact us

For any question about this policy or your personal data, contact us at legal@numberpii.com, or write to: NUMBER PII LTD, 86-90 Paul Street, London, EC2A 4NE, United Kingdom.