Privacy Policy

Last updated: April 2026

1. Who We Are

Concoct Technologies ("we", "us", "our") is a web design, SEO, AEO & AI solutions agency based in Royal Leamington Spa, United Kingdom. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect the following information when you use our website or contact us:

• Name, email address, and phone number (via contact forms)
• Company name and project details you share with us
• Technical data such as IP address, browser type, and pages visited (via analytics)
• Cookie preferences and consent records

3. How We Use Your Information

• To respond to your enquiries and provide our services
• To send project updates and relevant communications
• To improve our website and user experience
• To comply with legal obligations

3A. Email Communications

When you request a free website audit, you will receive a confirmation email and a short series of follow-up emails (up to 4 emails over 14 days) with SEO tips and recommendations relevant to your business.

• Every email contains a one-click unsubscribe link
• You can unsubscribe at any time and your email address will be permanently removed from our mailing list
• We use Amazon SES (eu-west-1 region) and Resend as our email service providers, both of which process data under strict data processing agreements
• We do not sell, rent, or share your email address with third parties for marketing purposes

4. Legal Basis for Processing

We process your personal data based on: your consent (e.g. newsletter signup), contractual necessity (e.g. delivering services you've requested), and legitimate interests (e.g. improving our website).

5. Data Sharing

We do not sell your personal data. We may share data with the following trusted third-party service providers who process data on our behalf under strict data processing agreements:

• Vercel - website hosting
• Supabase - database
• Amazon Web Services / SES - email delivery
• Resend - transactional email
• Google Analytics - website analytics (with cookie consent)

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Contact form submissions are retained for up to 2 years.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at info@concoctt.com.

8. Cookies

Our website uses essential cookies to ensure proper functionality and analytics cookies to understand how visitors use our site. You can manage your cookie preferences through your browser settings.

9. Contact Us

If you have any questions about this privacy policy, please contact us at info@concoctt.com or write to us at Royal Leamington Spa, United Kingdom.