Last updated: 2026-06-07
Who we are
Oceanect Ltd (“we”, “us”) is a private limited company registered in England and Wales (company number 09569310). Address: 20-22 Wenlock Road, London N1 7GU, United Kingdom. We are the data controller for personal data collected through this website.
For privacy-related questions or to exercise the rights described below, use the contact form and mention “privacy” in your message.
What we collect
We collect personal data only when you send us a message through the contact form. Specifically:
- Name and email address — supplied by you, so we can respond
- Message content — what you wrote
- Technical metadata — your IP address, browser user-agent, submission timestamp, and anti-spam signals (e.g. how long you took to fill the form)
We do not set tracking cookies and use no advertising trackers. The site uses cookieless, self-hosted analytics — see “Analytics” below.
Why we collect it
Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)) — namely, responding to business enquiries and preventing automated abuse of the contact form. Submitting a message constitutes a clear voluntary act on your part to initiate contact.
We do not use your data for marketing.
How long we keep it
| Data | Retention |
|---|---|
| Submission record in our audit archive | 365 days, then automatically deleted |
| Email forwarded to our inbox | until manually deleted from our mail provider |
| Server logs | 30 days |
You may request deletion sooner — see “Your rights” below.
Where it’s processed
Submission data is stored in Amazon Web Services, region eu-west-2
(London), with encryption at rest and in transit.
To help us triage and categorise messages, the content of your submission is sent to Anthropic (Claude Haiku model) for automatic classification. Anthropic processes the data in the United States. Anthropic does not train models on this data. See Anthropic’s privacy policy and API terms.
The classification is informational only — it shapes how we triage a human-read response. It does not produce decisions with legal or similarly significant effects, so the right under UK GDPR Article 22 (automated decision-making) is not engaged.
Analytics
We run a cookieless analytics tool on infrastructure under our exclusive technical control, in the United Kingdom. It records aggregated statistics about how pages are used — what’s popular, where visitors arrive from, broad browser and country information — without identifying individual visitors, setting cookies, or sharing data with anyone else.
Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)) — understanding how the site is used so we can improve it.
Cookie consent: because no cookies are set and no information is stored on your device, no consent banner is required under the Privacy and Electronic Communications Regulations.
Retention: aggregated statistics are retained indefinitely as non-identifying counters; no individual visitor can be identified or singled out from this data.
Anti-bot verification (Cloudflare Turnstile)
We use Cloudflare Turnstile to verify that form submissions come from a real browser rather than an automated tool. Turnstile may collect limited technical information about your browser (e.g. user agent, language settings, hardware characteristics, browser plugin information) to perform this verification. This data is processed by Cloudflare under their Turnstile Privacy Addendum.
Third-party processors
| Processor | Purpose | Jurisdiction |
|---|---|---|
| Amazon Web Services | Storage, email delivery, compute | UK (eu-west-2) |
| Anthropic | Message classification | United States |
| Cloudflare | Bot verification (Turnstile), CDN | United States / global |
International transfers to processors outside the UK rely on the UK’s adequacy regulations and/or the EU Standard Contractual Clauses where applicable.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectification if it’s inaccurate or incomplete
- Erasure (“right to be forgotten”)
- Restriction of how we process it
- Data portability in a structured machine-readable format
- Object to processing based on legitimate interests
To exercise any of these, use the contact form and mention “privacy” in your message. We aim to respond within one calendar month.
If you’re not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority.
Changes to this notice
We may update this notice from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be announced where reasonable.