Privacy policy

1.1This policy explains how UESTIMATES LTD ("we", "us", "our") collects and uses personal data about you when you:

(a)visit uestimates.com (section 3);

(b)send us an enquiry (section 4);

(c)work with us on our MCP services, or are considering them (section 5).

1.2Askwick is a trading name of UESTIMATES LTD. Askwick isn't available yet and collects no personal data. We'll update this policy before it does.

1.3We follow the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, both as amended by the Data (Use and Access) Act 2025. For marketing messages and cookies we also follow the Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR").

1.4When we build an MCP server or connector for a client, we may handle personal data held in the client's systems. We do this only on the client's instructions, as its processor, under a data processing agreement. The client's privacy notice applies to that data, not this policy.

2.1The controller is UESTIMATES LTD, a company registered in England and Wales with company number 12828848. Our registered office is 124 City Road, London EC1V 2NX.

2.2For anything about this policy or your data, email office@uestimates.com with "Data request" in the subject line.

2.3We have not appointed a data protection officer. Our director is responsible for how we handle personal data.

3.1When you visit uestimates.com, our web server receives technical data: your IP address, your browser and device type, the page you ask for and the time.

3.2We use it only to show you the website and to keep it working and secure. Our lawful basis is legitimate interests: running a secure website. We don't keep a record of the pages each visitor views, and we don't use analytics or advertising tools.

3.3The pages load their fonts, images and code from our own server only, so no other company learns about your visit.

3.4This website doesn't set any cookies at the moment. Our Cookie policy explains what we'll do if that changes.

4.1When you use a form on this website or email us, we collect your name, email address, organisation, role, website, the answers you give about your project or question, your message, and whether you ticked the box for emails about our MCP work.

4.2The website sends your message to our business email and sends you a copy, so you have a record of what you asked.

4.3Please don't send us health information or other sensitive personal data through our forms, or confidential business information unless we have agreed to keep it confidential.

5.1If you work with us on an MCP services project, we collect your name, job title, business email address and phone number, our communications with you, meeting notes, and contract and billing details.

5.2We may contact people at UK businesses that could benefit from our services, using business contact details from public sources such as company websites and Companies House. We tell you where we got your details in our first message to you.

5.3Our rules for business marketing:

(a)we send marketing emails without prior consent only to people at limited companies, limited liability partnerships and other corporate bodies, never to sole traders or ordinary partnerships unless they have agreed or the law allows it;

(b)before we call a business number, we check it against the Telephone Preference Service or the Corporate Telephone Preference Service;

(c)every marketing email tells you how to opt out. If you opt out or object, we stop and add your details to a suppression list so that we don't contact you again.

6.1We share personal data only with:

(a)our service providers, who act on our instructions: Google (Google Workspace), which provides our business email and sends the website's form emails, and Hetzner Online GmbH, which hosts the website on servers in Germany;

(b)AI tools that help us sort enquiries and draft replies. They work under business terms in which the provider acts only on our instructions and does not train its models on our data. A person reads every reply before we send it;

(c)our engineering and support team, who build, run and support our services (section 7);

(d)professional advisers, such as lawyers and accountants;

(e)HMRC, regulators, the police and courts, when the law requires or allows it;

(f)a buyer or investor, if we sell or reorganise all or part of our business. They will have to keep your data safe and use it in line with this policy.

6.2We do not sell your personal data, and we do not make decisions about you by automated means alone.

7.1Our website runs on servers in Germany. Transfers to the European Economic Area are covered by UK adequacy regulations.

7.2Google may process our email outside the UK and the European Economic Area, including in the United States. Google LLC is certified under the UK Extension to the EU-US Data Privacy Framework, which UK law recognises as giving adequate protection.

7.3Our AI tools may process data in the United States. Their providers' data processing terms protect these transfers with the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.

7.4Some of our team work in Ukraine and may see personal data to answer enquiries and deliver our services. The UK has not made adequacy regulations for Ukraine. Where this is a restricted transfer, we protect it with the International Data Transfer Agreement issued by the ICO, or the UK Addendum to the EU Standard Contractual Clauses, and only the people who need the data for their work can see it.

7.5You can ask us for more information about these safeguards by emailing office@uestimates.com with "Data request" in the subject line.

8.1We keep personal data only for as long as we need it. After a period ends, we delete the data or make it anonymous.

8.2We may keep data for longer if we need it for a legal claim or the law requires it.

9.1We use appropriate technical and organisational measures to protect personal data. For example, the website works only over an encrypted connection (HTTPS), and only the people who need it for their work can reach our email and servers.

9.2If a personal data breach is likely to put your rights at high risk, we will tell you without undue delay.

10.1You have the right to:

(a)access: ask for a copy of your personal data and information about how we use it;

(b)rectification: ask us to correct data that is wrong or incomplete;

(c)erasure: ask us to delete your data in some situations;

(d)restriction: ask us to limit how we use your data in some situations;

(e)portability: ask for data you gave us in a common electronic format, where we rely on consent or contract and process it automatically;

(f)objection: object to our use of your data where we rely on legitimate interests. You can object to direct marketing at any time, and we will stop;

(g)withdraw consent: where we rely on consent, you can withdraw it at any time. This does not affect what we did before you withdrew it.

10.2To use your rights, email office@uestimates.com with "Data request" in the subject line.

10.3We may ask you to confirm your identity or to tell us more about your request. We respond within one month of receiving what we need. If your request is complex, or you send several requests, we may extend this by up to two more months, and we will tell you within the first month if we do.

10.4We do not charge a fee in most cases. We may charge a reasonable fee, or refuse, if a request is clearly unfounded or excessive, and we will explain why. Some rights have exceptions; if we cannot do what you ask, we will tell you why.

10.5We use what you send with a request or complaint only to deal with it. Our lawful basis is legal obligation: the UK GDPR and the Data Protection Act 2018.

11.1If you are unhappy with how we have used your personal data, please complain to us first by emailing office@uestimates.com with "Data protection complaint" in the subject line.

11.2We will acknowledge your complaint within 30 days, look into it, respond without undue delay and tell you the outcome.

11.3If you are not happy with our response, you can complain to the Information Commissioner's Office. The ICO will usually expect you to have complained to us first.

• Website: https://ico.org.uk/make-a-complaint/
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

11.4You also have the right to go to court.

12.1This website and our services are for businesses and are not directed at children. We do not knowingly collect personal data from children under 13. If we learn that we have, we will delete it.

13.1This website links to other websites. This policy does not apply to them. Please read their own privacy policies.

14.1We may change this policy, and we will update it before Askwick opens. The date at the top shows when it last changed. If we make an important change, we will tell our clients by email before it takes effect.