CraftAutomate

Privacy Policy

Last updated: 14 August 2026

This policy explains, in plain English, what personal information CraftAutomate collects through this website, why we use it, who else handles it and what rights you have. We have written it to match what the website actually does.

1. Who we are

CraftAutomate, operated by Joe Todd, sole trader, is the data controller for the personal information described in this policy. CraftAutomate is a UK business providing AI automation services to small businesses and trades.

You can contact us about anything in this policy at [email protected]. A postal correspondence address is available on request.

2. What we collect and why

Enquiries through the contact form

We collect your name, email address and message, and your phone number, business type and how you heard about us if you choose to provide them. We use this to read and reply to your enquiry and to follow up on the service you asked about.

Consultation bookings

We collect your name, email address, your chosen appointment time, and your phone number, business type and any notes if you provide them. We use this to arrange the consultation, send you a confirmation, and attend the appointment.

The AI assistant on this website

When you type a message to our AI assistant, that message and the recent conversation are sent to an AI service so a reply can be generated. Conversations are not saved in our own website database and disappear when you close or refresh the page. If you ask the assistant to book a consultation, the booking details you give it are saved in the same way as a booking made through the booking form.

Please do not enter sensitive personal information into the assistant, and only share the details needed for your enquiry.

Optional microphone and voice features

The assistant has an optional microphone button and can read replies aloud. These features are off unless you choose to use them, and your browser will ask your permission before the microphone is switched on.

Speech recognition and speech playback are provided by your own browser or device rather than by us. Depending on which browser and device you use, turning on the microphone may cause your speech or audio to be sent to your browser or operating system provider’s speech services to be converted into text. That processing is outside our control and is governed by your browser or device provider’s own privacy terms. If you would rather not use it, simply type your message instead.

Technical information and security

Like most websites, our hosting and website software handle technical information such as your IP address, browser type and the pages you visit. We use your IP address in a short-lived, in-memory count of requests to limit how many messages, enquiries or bookings can be sent in a short period. This protects the website from spam and abuse. These counts are not saved to our database and are cleared regularly.

Our Missed Call Revenue Calculator

The calculator works entirely inside your own browser. The figures you enter are not sent to us or to anyone else, and nothing is stored.

3. Marketing

Sending an enquiry or booking a consultation does not sign you up to marketing. We use your details only to reply to you, arrange and confirm your consultation, and communicate about the service you asked about. If we introduce a newsletter or marketing emails in future, that will have its own separate opt-in and an unsubscribe link in every message.

4. Our lawful bases

Under UK GDPR we must have a lawful basis for using your personal information. We rely on:

  • Steps taken at your request before entering into a contract: arranging, confirming and attending a consultation you have booked, and dealing with an enquiry about work you are considering.
  • Legitimate interests: replying to enquiries, running and securing this website, generating AI assistant replies, preventing spam and abuse, and keeping records of the work we do. We only rely on this where it does not override your rights.
  • Contract: where you go on to become a client and we need your information to deliver the service.
  • Consent: for genuinely optional things you choose to switch on, such as the microphone feature, and for any future marketing emails. Where we rely on consent you can withdraw it at any time.
  • Legal obligation: where we have to keep certain records, for example for tax or accounting.

5. Who else handles your information

We do not sell your personal information and we do not share it for advertising. To run the website we use service providers who process information on our instructions:

  • Website hosting — serving this website and keeping server logs.
  • Database hosting — storing enquiry and booking records.
  • AI service — generating the assistant’s replies.
  • Email delivery — sending your booking confirmation and alerting us to new enquiries and bookings.

Our website, database, AI assistant and notification emails all run on the Abacus.AI application platform. Your browser or device provider is also involved if you choose to use the microphone feature, as described above.

We may also share information where we are required to by law, or with professional advisers where necessary.

6. Information sent outside the UK

Our website, database, email delivery and AI assistant are provided through the Abacus.AI platform. Some of that processing may take place outside the United Kingdom. We are in the process of confirming the locations involved and the safeguards our platform provider applies, and we will update this section once that is confirmed. We have deliberately not stated a specific safeguard here rather than claim something we have not verified.

If you would like to know the current position before sending us information, please email [email protected] and we will tell you what we know at that point.

7. How long we keep it

As a general rule, enquiries and booking records are kept for no longer than 24 months after our last meaningful contact with you, unless we need to keep particular information longer for legal, accounting, contractual or dispute reasons.

To be straightforward with you: this is currently a manual process. The website does not automatically delete records after 24 months, so enquiry and booking records are reviewed and removed by hand. If you ask us to delete your information sooner, we will do so, subject to anything we are required to keep.

Server logs and technical records are kept for whatever period our hosting provider applies. The short-lived request counts used to prevent abuse are held only in memory and are cleared regularly.

8. Your rights

Under UK GDPR you have the right to:

  • ask for a copy of the personal information we hold about you
  • have inaccurate information corrected
  • ask us to delete your information
  • ask us to restrict how we use it
  • object to processing we carry out under legitimate interests
  • ask us to transfer your information to you or another provider, where that right applies
  • withdraw consent where we have relied on it

To exercise any of these rights, email [email protected]. We will normally respond within one month. There is no charge in most cases.

If you are unhappy with how we have handled your personal information, you can complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk/make-a-complaint. We would appreciate the chance to put things right first.

9. Automated decisions

We do not make automated decisions about you that have legal or similarly significant effects. The AI assistant answers questions and can arrange a consultation, but it does not decide anything about you, price your work or assess you in any way.

10. Security

We take reasonable technical and organisational steps to protect your information. The website is served over a secure connection, uses security headers and content restrictions, validates and cleans everything submitted through its forms, and limits how often requests can be made to prevent abuse. Access to enquiry and booking records is limited to CraftAutomate. No website can be completely secure, but we take this seriously.

11. Cookies

This website does not currently set cookies or use analytics or tracking technologies. See our Cookie Policy for details.

12. Changes to this policy

We may update this policy as our website or services change, or as we confirm further details from our platform provider. The date at the top shows when it was last updated. Please check back from time to time.

13. Contact us

Questions about this policy or about your information? Email [email protected]. A postal correspondence address is available on request.