PRIVACYNOTICE

ONLYCOMZ LTD is the company behind the OnlyComz studio. We are registered in England and Wales, company number 17494343, and our registered office is 66 Paul Street, London, EC2A 4NA.

For data protection purposes, ONLYCOMZ LTD is the controller of the information described here. That means we decide what is collected and why, and we answer for it.

There are only two places on this website where you can give us anything about yourself.

The enquiry form on the Contact page. If you send us an enquiry, we record your name, your email address, your organisation and your message. We also record the service you selected, a random reference number so that you and we can point at the same enquiry, and the date and time our server received it. The reference is not derived from you, your browser or the clock, and it cannot be used to look anything up.

The ComzIQ waitlist. If you ask to hear when ComzIQ is ready, we record your email address, plus your name and organisation if you gave them. An optional question you skip is stored empty rather than guessed at.

What we do not collect. We set no cookies. We run no analytics, no advertising, no tracking pixels, no session recording and no third-party scripts of any kind. There is no account, no login, no newsletter, no comment, no search and no payment on this website. We no longer record the browser string your device sends, either.

Our counting, and why it cannot identify you. We count page views and a few clicks as a daily counter with five fields: the day, the event, the page, a detail, and how many times it happened. Two people reading the same page on the same day are the number two. There is no identifier, no address, no browser string and no time finer than the day, so no question about an individual can be asked of that record.

The address your device connects from. Every website sees the address a request comes from, ours included, because that is how a server replies. We use it for one purpose: a fifteen-minute ceiling on how many messages one address can send, so that a script cannot flood the form. It is held in the running server's memory and is never written to our database or to a log line.

Answering your enquiry. We use what you send to read it and reply to it, and for nothing else. The lawful basis is our legitimate interests: you wrote to us on a form that exists to carry an enquiry, and receiving, reading and responding to enquiries is a genuine interest of ours which we have weighed against yours. That weighing is written down rather than assumed, in our legitimate interests assessment, and you can ask us for a copy of it by post at ONLYCOMZ LTD, 66 Paul Street, London, EC2A 4NA. You can object at any time by contacting us, and if you object we will stop, which for an enquiry normally means deleting it.

Telling you when ComzIQ is ready. If you join the ComzIQ waitlist, you are asking us to contact you when ComzIQ is ready, and that is the only thing we use your sign-up for. The lawful basis is your consent: the wording beside the sign-up tells you what the list is for before you join, joining is your positive step, and what you are consenting to is being contacted about ComzIQ being ready and nothing else. It is never consent to general OnlyComz marketing, we do not add waitlist sign-ups to any other list, we do not email them about anything else, and we do not pass them to anyone. You can withdraw at any time. Write to ONLYCOMZ LTD, 66 Paul Street, London, EC2A 4NA and we will delete your details, and that does not affect anything we did before you asked.

What your sign-up leaves behind. We keep the address you gave us, the time you joined and the version of the wording you were shown, so that we can show what you were told and when. We do not keep a browser string, an address or any device detail as evidence of it, and the message field on a waitlist row is stored empty.

Keeping the site working and free of abuse. Our counting and the address ceiling described above are how we know the site is being used and how we keep rubbish out of the forms. The lawful basis is our legitimate interests in keeping the service available and the forms clean, and it is assessed in the same written record as the enquiry form.

We do not sell your information, share it for advertising, profile you or make automated decisions about you.

We share it with three suppliers, each of which does one job for us:

• Vercel, which hosts this website and serves its pages, and which keeps its own logs of the requests it handles.
• Neon, which provides the Postgres database where enquiries and waitlist sign-ups are stored.
• Resend, which sends the email telling us an enquiry has arrived. That email carries what the enquirer sent: name, email address, organisation, service, message and the time. A waitlist sign-up never triggers an email.

Enquiries are read by us at ONLYCOMZ LTD, 66 Paul Street, London, EC2A 4NA. Nobody else sees them.

Our website runs on Vercel, our records are held in Neon Postgres, and our notification email is sent through Resend. Each answers for where it stores and processes information, and for what it keeps in its own logs. We are confirming the regions each one holds information in, and the safeguards that apply if anything is held outside the United Kingdom, and this notice will state them once that is established rather than guessing at it now.

• Enquiries: 24 months from the date of the enquiry, which is the date our server received it. The deletion itself is a scheduled job on the site's hosting: it is built and tested, and it is not switched on yet, so nothing is deleted automatically today and an enquiry is deleted by hand. Before it is switched on we run it against the live database and watch what it does, and this paragraph changes on the day it is. There is no exception for a client relationship. If we go on to work with you, what we need for that work is held in our client and business records, under the rules that apply to those records, and not by keeping your website enquiry. If a particular legal obligation required us to keep particular information, we would keep that information separately for as long as the law required, and that would not stop the enquiry itself being deleted on time.
• The email that tells us your enquiry arrived. We keep a copy of this email in our mailbox for up to 24 months. At least once a year, we check for website enquiry notifications older than 24 months and delete them, including from deleted items, so they are removed from the mailbox rather than simply moved to another folder. This is a documented manual process, not an automatic one.
• Records our suppliers keep are theirs and not ours. Vercel, Neon and Resend each process information on our behalf while our accounts are active, and each keeps its own operational logs and backups under its own arrangement, which is not our 24 month timetable and which we do not claim to delete on it. For the notification email, for example, Resend processes the message on our behalf while our account with them is active and deletes customer data within 90 days of the account being terminated, and its subprocessing is carried out in the United States. We promise no deletion period for anything Resend controls, because the period it publishes is tied to our account ending and not to a date we set.
• Waitlist sign-ups: until three months after ComzIQ launches, then deleted. Until a launch date is set, nothing is deleted automatically, and no launch date is set today. If you ask us to delete your details before then, we will.
• Our counters contain no personal information, so these periods do not apply to them.

If you want your details removed sooner, ask us and we will delete them: see section 8. We do not email the waitlist today, so there is no unsubscribe link to click and nothing to unsubscribe from. When ComzIQ is ready and we do email the list, that email will carry its own way to opt out.

Under data protection law you have the right to:

• be told what we do with your information, which this notice does;
• ask for a copy of the information we hold about you;
• ask us to correct anything that is wrong;
• ask us to delete your information;
• ask us to restrict what we do with it, or object to it, where we are relying on our legitimate interests;
• withdraw your consent where consent is what we rely on, without affecting what we did before; and
• ask for your information in a portable format, where we process it automatically on the basis of consent or a contract.

These rights are not absolute. Where we cannot do what you have asked, we will tell you why.

Write to ONLYCOMZ LTD, 66 Paul Street, London, EC2A 4NA and say what you would like us to do. Please include the name and email address you used, so that we can find your record and not somebody else's. We will answer within one month.

Write to us by post at ONLYCOMZ LTD, 66 Paul Street, London, EC2A 4NA, or use the enquiry form on this site. If you have a question about this notice or about how we have handled your information, that is the route, and we will answer it.

If you are unhappy with how we have handled your information, please tell us first, by post at ONLYCOMZ LTD, 66 Paul Street, London, EC2A 4NA, so that we can put it right. You also have the right to complain to the Information Commissioner's Office, the United Kingdom's data protection regulator, at ico.org.uk.

If we change how we handle personal information, we will update this notice and its date.