Privacy notice

Last updated: 2026-06-05

Who we are

Oceanect Ltd (“we”, “us”) is a private limited company registered in England and Wales (company number 09569310). Address: 20-22 Wenlock Road, London N1 7GU, United Kingdom. We are the data controller for personal data collected through this website.

For privacy-related questions or to exercise the rights described below, email info@oceanect.com.

What we collect

We collect personal data only when you send us a message through the contact form. Specifically:

  • Name and email address — supplied by you, so we can respond
  • Message content — what you wrote
  • Technical metadata — your IP address, browser user-agent, submission timestamp, and anti-spam signals (e.g. how long you took to fill the form)

We do not set tracking cookies. The site uses no analytics, no advertising trackers, and no third-party fonts loaded with identifiers.

Why we collect it

Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)) — namely, responding to business enquiries and preventing automated abuse of the contact form. Submitting a message constitutes a clear voluntary act on your part to initiate contact.

We do not use your data for marketing.

How long we keep it

DataRetention
Submission record in our audit archive365 days, then automatically deleted
Email forwarded to our inboxuntil manually deleted from our mail provider
Server logs30 days

You may request deletion sooner — see “Your rights” below.

Where it’s processed

Submission data is stored in Amazon Web Services, region eu-west-2 (London), with encryption at rest and in transit.

To help us triage and categorise messages, the content of your submission is sent to Anthropic (Claude Haiku model) for automatic classification. Anthropic processes the data in the United States. Anthropic does not train models on this data. See Anthropic’s privacy policy and API terms.

The classification is informational only — it shapes how we triage a human-read response. It does not produce decisions with legal or similarly significant effects, so the right under UK GDPR Article 22 (automated decision-making) is not engaged.

Anti-bot verification (Cloudflare Turnstile)

We use Cloudflare Turnstile to verify that form submissions come from a real browser rather than an automated tool. Turnstile may collect limited technical information about your browser (e.g. user agent, language settings, hardware characteristics, browser plugin information) to perform this verification. This data is processed by Cloudflare under their Turnstile Privacy Addendum.

Third-party processors

ProcessorPurposeJurisdiction
Amazon Web ServicesStorage, email delivery, computeUK (eu-west-2)
AnthropicMessage classificationUnited States
CloudflareBot verification (Turnstile), CDNUnited States / global

International transfers to processors outside the UK rely on the UK’s adequacy regulations and/or the EU Standard Contractual Clauses where applicable.

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectification if it’s inaccurate or incomplete
  • Erasure (“right to be forgotten”)
  • Restriction of how we process it
  • Data portability in a structured machine-readable format
  • Object to processing based on legitimate interests

To exercise any of these, email info@oceanect.com. We aim to respond within one calendar month.

If you’re not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority.

Changes to this notice

We may update this notice from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be announced where reasonable.