Legal
Privacy & legal notice
How Systemah collects, uses and protects personal data through this website — in plain English. For anything about your data, email dpo@systemah.co.uk.
Last updated: 28 October 2026
01
Who we are
Systemah Ltd is the data controller for personal data collected through this website. Registered in England & Wales, company number 14002316. Registered office: 27 Old Gloucester Street, London WC1N 3AX, United Kingdom. VAT GB 420434343.
For any data protection question or request, email dpo@systemah.co.uk.
02
What we collect
Contact form: your name, email, phone (optional), company, the topics you select, your message and, if you request a call, your preferred date and time.
Newsletter: your email address, if you choose to subscribe.
Website use: technical and usage data collected by cookies and analytics tools — see section 05.
03
Our AI adviser
Systemah Advisory is an AI adviser that helps you think through a question. What you type is processed by our AI service provider to generate a reply.
Nothing from your conversation is sent to Systemah unless you explicitly choose to share it with us. Please don’t enter sensitive personal information in the chat.
04
How we use it, and why
To reply to your enquiry or arrange a call (legitimate interests, or steps before a contract). To deliver services if we work together (contract). To send our newsletter (your consent, which you can withdraw at any time). To understand and improve how the site performs (your consent to analytics cookies). To meet legal and accounting obligations (legal obligation).
05
Cookies, analytics and monitoring
We use essential cookies to make the site work. With your consent, we also use Google Analytics, Google Tag Manager and other performance-monitoring tools to understand how the site is used and keep it fast and reliable.
Non-essential cookies are only set if you accept them, and you can change your choice at any time through the cookie settings.
06
Who we share it with
Only with the service providers we need to run the site and our business — such as hosting, email, form handling, analytics and our AI service provider — under contracts that protect your data. We never sell your data or share it for others’ marketing.
Some providers, such as Google, may process data outside the UK. Where they do, appropriate safeguards are in place, such as UK adequacy regulations or approved contract terms.
07
How long we keep it
Web enquiries that don’t lead to working together: 24 months, then deleted. Client records: for the length of our work together and as long as the law requires afterwards (typically six years for financial records). Newsletter: until you unsubscribe. Analytics data: according to the retention settings of the analytics tools.
08
Your rights
You can ask for a copy of your data, or ask us to correct, delete or restrict it, object to how we use it, or move it to another provider. Where we rely on consent, you can withdraw it at any time.
Send requests to dpo@systemah.co.uk. We aim to reply within 3 working days and to act on your request within 5 working days where we are able to — and always within the legal limit of one month.
If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk).
09
Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections, access controls and reputable hosting providers.
10
Legal information
The content on this website, including our Insights articles, is general information and not professional advice for your specific situation. Product names mentioned belong to their respective owners. We may update this notice from time to time; the date at the top shows the latest version.