Privacy & Cookie Notice

Last updated: 30 September 2026

This notice explains how Aestima Software Ltd (“we”, “us”) collects and uses personal data through this website, www.aestima.uk, the cookies the site uses, and the rights you have under UK data protection law (the UK GDPR and the Privacy and Electronic Communications Regulations, “PECR”). It covers the public website only; the Aestima application that customers log in to is covered by the agreement with each customer.

Who we are

The data controller for this website is Aestima Software Ltd. For any privacy question or to exercise your rights, contact us at aestima [at] templeton-smith [dot] com. Our postal address is available on request.

The information we collect

• When you make an enquiry. If you use the “Request Access” form, we collect your name, your company or practice, your email address and your message.
• If you allow analytics. Only if you click “Accept” on the cookie banner, Google Analytics collects usage information, the pages you view, approximate location (from a truncated IP), and basic device and browser details, so we can see how the site is used. Vercel Analytics records the pages viewed and how quickly they load, without cookies. If you decline, none of this is collected.
• Automatically, to run the site. Our host records standard technical information (such as IP address and browser type) in server logs to deliver and secure the website. This is not used to identify you.

Why we use it, and our lawful basis

• To respond to your enquiry and discuss access to Aestima. We keep a short record of how we followed it up - when we replied, any meeting, where it led, and our notes. Lawful basis: our legitimate interests in responding to people who contact us, and taking steps at your request before any contract.
• To understand and improve the website (analytics). Lawful basis: your consent, which you give through the cookie banner and can withdraw at any time.
• To operate and secure the site. Lawful basis: our legitimate interests in keeping the website available and protected.

Who we share it with

We do not sell your personal data. We use a small number of trusted providers (“processors”) to run the website:

• Supabase - stores your enquiry in our database, hosted in London. (Supabase is a United States company, and some data, such as technical logs, may be processed outside the UK.)
• Resend - delivers the enquiry form to us by email. (United States.)
• Google Analytics (Google) - website analytics, used only if you accept cookies. (United States.)
• Vercel Analytics (Vercel) - page views and page-load speed, used only if you accept cookies. It sets no cookies. (Vercel is a United States company.)
• Vercel - hosts and serves the website. The website and the enquiry form run in London. (Vercel is a United States company, and some data, such as technical logs, may be processed outside the UK.)

Where these providers process data outside the UK, that transfer is protected by appropriate safeguards (such as the UK extension to the EU-US Data Privacy Framework, or Standard Contractual Clauses). We may also disclose information if required by law.

How long we keep it

We keep an enquiry for 24 months after our last contact with you. After that we keep only your name, your company, the dates and the outcome, and delete the rest - your email address, your message and our notes - unless you have become a customer, in which case we keep them for as long as needed for that. Analytics data is retained according to our Google Analytics setting (Google's standard retention is up to 14 months) and Vercel's standard retention for Vercel Analytics.

Your rights

Under the UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you (access);
• have inaccurate data corrected (rectification);
• ask us to delete your data (erasure), or to restrict or object to its use;
• ask for your data in a portable form (portability); and
• withdraw consent for analytics at any time, using the “Cookies” control on the site.

To exercise any of these, email aestima [at] templeton-smith [dot] com. There is normally no charge, and we will respond within one month.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK regulator, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113.

Cookies

A cookie is a small file a website can store on your device. We do not set any non-essential cookies until you agree. When you first visit, a banner asks whether you accept analytics cookies, and declining is as easy as accepting. You can change your choice any time using the Cookies button at the bottom-left of the site.

The cookies and similar storage the site uses are:

Vercel Analytics, which also runs only if you accept, sets no cookies.

You can also block or delete cookies in your browser settings, though that won't recognise your choice here the next time you visit.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed.