Skip to content

Legal

Privacy notice

Last updated: 30 October 2026

This notice explains what personal data we collect, why, how long we keep it and what rights you have. It applies to this website (ursova.co.uk), to our business emails and to our work with clients. It is written to meet the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR) and the EU GDPR.

1. Who we are

The controller of your personal data is Bruno Faccioli, trading as Ursova, a sole trader registered in Italy. VAT IT03334080805. Via Corrado Alvaro 11, 89135 Reggio Calabria, Italy.

For anything about your data, write to hello@ursova.co.uk.

2. B2B prospecting

We contact companies that we think could use our services. To do this we collect business contact details: name, job title, work email address and company name. We take them from public sources such as company websites, Companies House and business directories.

  • Lawful basis: legitimate interests (Article 6(1)(f) UK GDPR and EU GDPR). Our interest is telling businesses about services that are relevant to their work. We only use work contact details and only write about matters relevant to the recipient's role.
  • Who we email: we only email limited companies, PLCs and LLPs. We never email sole traders or partnerships without their consent.
  • Opting out: every email includes an easy way to opt out. You can reply "no" or write to hello@ursova.co.uk. We respect objections immediately.
  • Suppression list: when you object, we keep your email address on a suppression list so that we never contact you again.

3. Bookings and enquiries

When you book a call or write to us, we collect what you give us: your name, company, email address, phone number (optional), what you use today for stock and invoicing (optional) and the content of your messages. If you arrived through a link in one of our emails, we also record the campaign and sector codes in that link (for example src=email, s=merchants) together with your booking.

We use this data to reply to you, to arrange and hold the call, and to send you the meeting details. The call is set up in our Google Calendar with a Google Meet link, and you receive an invitation at the email address you gave us.

Lawful basis: taking steps at your request before entering into a contract (Article 6(1)(b)), and our legitimate interests in replying to business enquiries (Article 6(1)(f)).

4. Clients

When we build or run software for a client, we may process personal data held in the client's systems, such as their customers' or staff's details. In that case the client is the controller and we act as their processor, under a data processing agreement signed before we touch any data. We only process that data on the client's instructions.

We also keep the business contact details of the people we work with at our clients, to run the contract (Article 6(1)(b)) and to meet our legal and tax obligations (Article 6(1)(c)).

5. Processors we use and international transfers

We use these service providers, each under a contract that requires them to protect your data:

  • Google Workspace: email, calendar and Google Meet.
  • Our hosting provider: the server that runs this website and our booking system.
  • Email deliverability tools: to send our business emails and manage opt-outs.
  • Microsoft Azure: hosting of the systems we build for clients.

Transfers: data moves between the UK and the EU on the basis of the adequacy decisions in place between them. Where a provider is in the United States, transfers rely on the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge) or on standard contractual clauses, as applicable.

6. How long we keep data

  • Prospect data: deleted 12 months after our last contact, or straight away if you object. Only the suppression entry is kept, so that we don't contact you again.
  • Enquiry and booking data: 24 months.
  • Client data: as set out in the contract and the data processing agreement.

This website counts visits to each page anonymously, without cookies and without storing IP addresses or any other identifier.

7. Your rights

You have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected (rectification);
  • have your data deleted (erasure);
  • restrict how we use it;
  • object to our use of it, including to direct marketing at any time, in which case we stop straight away;
  • receive the data you gave us in a portable format (portability).

To use any of these rights, write to hello@ursova.co.uk. We reply within one month.

You can also complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it).

8. Cookies

This website sets no cookies. See our cookie policy for the details.

9. Changes to this notice

We update this notice when the way we handle data changes. The date at the top shows the latest version. This version was last updated on 30 October 2026.