Last updated: 12 August 2026
This policy explains what personal data Adryn collects when you visit this website or use our client portal, why we hold it, and what you can ask us to do with it.
The data controller is Adryn Ltd, a company registered in England and Wales, company number 17308893, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are registered with the Information Commissioner's Office under reference ZC189798. Where this policy says "we" or "us", it means that company.
If you fill in the contact form, we collect the name, email address, selected service and message you enter. Nothing else on the form is hidden from you: what you type is what we receive.
If you have a client portal account, we hold your email address, your account authentication details, the projects assigned to you, and any pricing proposal we have prepared for you.
When you simply browse the site, our hosting provider and the services listed in section 4 receive your IP address, browser type and the pages you requested, because that is how a web request works. We also receive aggregated visit statistics from Cloudflare Web Analytics.
We do not ask for, and have no use for, special category data such as health, biometric or political information. Please do not send it to us through the contact form.
| What | Why | Legal basis (UK GDPR) |
|---|---|---|
| Contact form submissions | To reply to your enquiry and, if it leads somewhere, to quote for the work | Legitimate interests, and steps taken at your request before entering a contract |
| Client portal account | To let you sign in, see your projects and review proposals | Performance of our contract with you |
| Aggregated site statistics | To understand which pages are useful and whether the site is working | Legitimate interests. No cookies are set and visitors are not individually identified |
| Server and security logs | To keep the site available and defend it from abuse | Legitimate interests |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights. You can object at any time using the contact details in section 8.
The public website sets no cookies. We have verified this by loading the site with an empty browser: no cookies are written and no data is placed in local storage. Our analytics provider is cookieless by design. That is why you are not being asked to dismiss a cookie banner.
The client portal sets one cookie, named __session, once you sign in. It exists only to keep you signed in as you move between pages, it is marked HttpOnly so scripts cannot read it, and it is not used for advertising, profiling or tracking you across other sites. It is strictly necessary for a service you have asked for, so it does not require consent. Signing out clears it.
We keep the list of third parties deliberately short, and we do not sell your data to anyone or share it for advertising. The services below process data on our behalf, or receive your IP address as an unavoidable consequence of your browser fetching a file from them.
| Service | What it does for us | What it receives |
|---|---|---|
| Google (Firebase Hosting, Cloud Firestore, Firebase Authentication) | Hosts the site, stores contact-form enquiries, and runs portal sign-in | Enquiry contents, portal account data, request logs |
| EmailJS | Delivers your enquiry to our inbox and sends your confirmation email | The name, email address, service and message you submitted |
| Cloudflare (Web Analytics and the cdnjs library CDN) | Aggregated visit statistics, and serving two animation libraries | IP address, browser type, page visited |
| Google Fonts | Serves the typefaces the site is set in | IP address, browser type |
| jsDelivr | Serves the email library used by the contact form | IP address, browser type |
We may also disclose data where the law requires it, or to establish or defend legal claims.
Some of these providers are based outside the UK, principally in the United States. Where data is transferred outside the UK, we rely on the safeguards those providers put in place, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or an adequacy decision where one applies.
Under UK GDPR you can ask us to give you a copy of your data, correct it if it is wrong, delete it, restrict what we do with it, or provide it in a portable format. You can object to processing we carry out under legitimate interests, and withdraw consent where we relied on it. We do not carry out automated decision-making or profiling.
Ask us using the details below and we will respond within one month. There is no charge. If you are not satisfied with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or on 0303 123 1113.
For anything in this policy, including a request about your data, email adam@adryn.co or write to us at the registered office in the opening paragraph.
If we change how we handle personal data we will update this page and change the date at the top. Where a change materially affects you, we will tell clients directly rather than relying on you noticing.
Adryn provides IT, AV and software services to clients in the UK, EU and Middle East. Terms of Service