Privacy Policy

Scope and who is responsible

This notice covers the RepMinute marketing website and inbound enquiries made through it. Customer portal use, client services and campaign outreach are covered separately.

RepMinute Limited is the controller. It is registered in England and Wales under company number 17459121. Its registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Privacy enquiries can be sent to charles.dance@repminute.com.

Information collected

The enquiry form requires only your email address. Your name, company name, website address and message are optional. RepMinute also records the submission timestamp and an enquiry reference so the enquiry can be identified and handled reliably.

Your email address is needed so RepMinute can reply; the optional details help RepMinute understand your request. There is no statutory requirement to submit an enquiry. Please do not include sensitive personal information in the form.

How enquiries are used

RepMinute uses the information to respond, assess whether the enquiry is a suitable fit and, where appropriate, arrange a consultation. Charles replies manually from RepMinute's existing Gmail mailbox. Submitting the form does not subscribe you to marketing, send an automatic email to you or confirm an appointment.

Lawful bases

For ordinary business enquiries, RepMinute relies on its legitimate interests in responding to a request you have made, assessing whether RepMinute is a suitable fit and arranging a consultation. RepMinute does not ask for your consent to process an enquiry, and submitting the form does not sign you up to marketing. Where an individual asks RepMinute to take steps towards a contract with that individual (not a contract with their employer), taking pre-contractual steps may apply instead.

Operating a secure website and preventing spam also relies on RepMinute's legitimate interests.

Services involved

Lovable hosts the website and provides the managed email service that sends a copy of the submitted enquiry to Charles's RepMinute Gmail mailbox, which is provided by Google. Lovable's managed enquiry email is delivered through Mailgun. There is no dedicated application database for enquiries.

Lovable acts as RepMinute's processor under its data processing agreement, which forms part of Lovable's Terms of Service and covers the website hosting, the managed enquiry email and the subprocessors Lovable lists in its Trust Center. Google processes the mailbox under its Cloud Data Processing Addendum accepted by RepMinute. Cloudflare processes Turnstile data under the data processing agreement incorporated in its self-service terms.

Cloudflare Turnstile evaluates browser and network signals and challenge responses to help prevent automated abuse. It does not receive the enquiry message through this integration. Cloudflare explains that it processes security signals for this purpose and also acts as a controller when it uses data to improve bot detection, in its Turnstile privacy notice.

Hosting, email, security and error logs may contain request information and error details. The enquiry handling code is designed not to log the fields submitted in the form.

Enquiry retention

RepMinute keeps unsuccessful or closed enquiries in its mailbox for up to 12 months after the last meaningful contact, then deletes them unless necessary information must be kept for a documented legal duty or dispute. Enquiry records are held in RepMinute's Gmail mailbox rather than a dedicated database, and are reviewed and deleted manually each month. This 12-month limit applies to RepMinute's own mailbox; it is not a statement about copies held by service providers.

Google's data processing terms commit Google to erase deleted data from its systems as soon as reasonably practicable and within a maximum of 180 days after it becomes unrecoverable, unless the law requires it to be kept. Moving an email to Trash does not by itself complete that deletion.

Under Lovable's data processing agreement, Lovable retains customer personal data for as long as necessary for the term of its agreement with RepMinute. On written request, Lovable deletes that data, except where the agreement allows it to keep data for handling account closure or deletion requests, preventing fraud, defending legal claims or meeting legal obligations, and copies may persist for a limited time in backups. Lovable has not supplied exact retention periods for managed email content, email logs or backups, so RepMinute cannot state those periods here. Customer-contract records are outside this notice's scope.

International processing

Personal information may be processed outside the UK by Lovable and its subprocessors, Google and Cloudflare. Lovable's subprocessor locations are listed for its platform as a whole, and Lovable does not promise that data stays in the EU or the UK. Its subprocessor list shows Mailgun, which delivers the enquiry email, in the United States.

Where personal information is transferred from the UK or EEA to countries without an adequacy decision, Lovable relies on the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum. Google's and Cloudflare's data processing terms also contain transfer provisions. You can request a copy of Lovable's transfer safeguards from privacy@lovable.dev, or ask RepMinute at charles.dance@repminute.com.

Cookies, storage and security

RepMinute does not use optional visitor analytics, advertising pixels or marketing trackers on this website. The website's hosting and Cloudflare Turnstile process technical browser and network signals to deliver the website, keep it secure and protect the enquiry form from abuse. Cloudflare also uses some Turnstile data for its own purposes as an independent controller, as described in its Turnstile privacy notice.

RepMinute uses proportionate measures including encrypted web connections, form validation and bot protection. No internet service can be guaranteed completely secure.

Automated decisions

RepMinute does not use solely automated decision-making that produces legal or similarly significant effects in this enquiry workflow. Bot protection may block a submission. If that happens, you can contact RepMinute manually at the email address above.

Your rights

Depending on the circumstances and applicable law, you may have rights to access, correct or erase personal information, restrict its use, and receive portable data.

Right to object: where processing relies on legitimate interests, you have the right to object to it.

To exercise a right, contact charles.dance@repminute.com. You may also complain directly to the Information Commissioner's Office. You do not have to contact RepMinute first.