Privacy policy

Who we are

RaBBLi Automations Limited is an automation agency registered in England and Wales, company number 17337173. Our registered office is Great Tey Business Centre, Warrens Farm, Brook Road, Great Tey, Colchester, England, CO6 1JG.

For everything described on this page we are the data controller, which means we decide what happens to the data and we are answerable for it. The way to reach us about any of it, including any request about your own data, is admin@rabbli.com. We have not appointed a data protection officer, because we are not required to have one.

We are not currently registered with the Information Commissioner's Office. We are checking whether a data protection fee is due and will say so here once that is settled. Nothing on this page depends on it, and your rights below apply either way.

The short version

• This site sets no cookies.
• Analytics is cookieless and does not load at all unless you accept it. It counts visits, it does not identify you.
• If you email us, we read it and reply. We do not add you to a mailing list.
• We do not sell personal data and we do not share it for anyone's marketing.
• You can ask us what we hold about you at any time, and complain to us or to the ICO if you are not satisfied.

What happens when you visit

The site is hosted by Netlify. To send a page to your browser, Netlify's servers receive your IP address, the address of the page you asked for, the time of the request, your browser's user agent string and similar technical details. That is how every website works, and it happens before any choice you make here.

Netlify keeps these access logs, which include visitor IP addresses, for less than 30 days, and collects them by default for running and troubleshooting the service. We do not use them, we do not export them and we do not combine them with anything else.

We have no backend and no database of our own. Nothing you do on the site is written into a record that we hold. For the technical data above we rely on our legitimate interest in delivering the site and keeping it secure.

Analytics

We use Cloudflare Web Analytics to see whether anyone is reading the site. It is cookieless. It writes nothing to your device and reads nothing from it, and it gives you no identifier.

What it shows us is aggregate: how many page views, which pages, which country visitors are in, which sites they arrived from, browser and device type, and how quickly pages loaded. What it cannot show us is you. It does not follow you to other sites, does not build a profile, cannot tell a returning visitor from a new one, and cannot see when you click the email link.

There is no cookie banner on this site, and that is deliberate rather than an oversight. Because nothing is stored on or read from your device, the rule that would require us to ask permission does not apply. Asking anyway would mean storing something on your device in order to remember your answer, which is more than the analytics itself does. So instead of a banner you get this page and a switch.

You can turn analytics off for this device at any time using the control further down, under Turning analytics off. It takes one click, there is no penalty, and nothing else on the site depends on it.

Cloudflare holds the unsampled measurements for seven days, then keeps an aggregated sample of roughly ten per cent of them. The dashboard we look at shows the previous six months.

Cookies and local storage

This site sets no cookies. There is no advertising, no tracking pixel, no embedded video, no map and no chat widget.

It keeps two small values in your browser's local storage. They stay on your device, we never receive them, and neither contains personal data:

• rabbli-preview-dismissed: remembers that you hid the notice at the top of the page telling you this is a preview of our new site, so it does not reappear every time you move around.
• rabbli-analytics-off: written only if you turn analytics off. Its whole purpose is to remember that you objected, so that we do not have to ask you again and so your choice survives moving between pages. If you have not turned analytics off, this value does not exist.

You can remove both at any time by clearing site data for rabbli.com in your browser settings. Clearing the second one turns analytics back on, because the record of your objection has gone with it.

Turning analytics off

The control below applies to this device and this browser only, because the setting is stored on your device and nowhere else. We hold no record of who has turned it off, and could not produce one if we were asked.

Turning it off stops the script loading from that point on. It does not delete figures already counted, because those are aggregate totals that were never linked to you and cannot be traced back to a single visit.

When you email us

The buttons on the site open your own email app with a message addressed to admin@rabbli.com. Clicking one tells us nothing. Nothing reaches us until you actually send something.

When you do, we get whatever you put in the message. Usually that is your name, your email address, your company, sometimes a phone number, and whatever you have told us about how your business works. Our email runs on Google Workspace, so Google stores and processes it for us.

We use it to reply, to arrange the free audit if that is what you are after, and to keep a record of what was agreed if you go on to become a client. We do not add you to a mailing list, and we do not pass your details to anyone for marketing.

Our lawful bases

UK GDPR requires a lawful basis for each thing we do with personal data. Ours are:

• Replying to your enquiry: legitimate interests. Ours is in running a business and answering people who write to us, yours is in getting a reply. Once we are actually arranging an audit or a piece of work, the basis becomes the steps taken before entering into a contract.
• Serving the website and keeping it secure: legitimate interests.
• Accounting and tax records once you are a client: legal obligation, alongside our contract with you.
• Counting visits: our legitimate interest in knowing whether the site is read. Nothing is stored on your device, and you can object at any time using the control on this page.

Where we rely on legitimate interests you have a right to object. That right is set out below, and it is a real one.

How long we keep things

We keep things only as long as there is a reason to:

• Enquiry emails that do not lead to work: 12 months, then deleted.
• Client correspondence and project records: 6 years after the engagement ends, which matches the limitation period for a contract claim and our accounting obligations.
• Accounting records: 6 years, as company law requires.
• Analytics: seven days unsampled, then an aggregated sample, with six months visible to us. None of it identifies anyone.
• Netlify's access logs: under 30 days, held by Netlify rather than by us.

For most of this there is no period set by law. The ones above are our own policy, and we will not keep personal data for longer than we need it. If you think we are holding something about you that we no longer need, ask and we will delete it or tell you why we cannot.

Who we share information with

We do not sell personal data. Three suppliers handle some of it on our behalf, under their terms as our processors:

• Netlify, which hosts the site and serves its pages.
• Cloudflare, which provides the analytics described above.
• Google, through Google Workspace, which provides our email.

We also have a company page on LinkedIn. If you follow us, message us or comment there, LinkedIn's own privacy policy governs what LinkedIn does with that. We see only what LinkedIn shows us and we cannot change how it works, so this notice does not try to cover it.

Our accountant sees billing records, as any company's accountant does. We do not share personal data with anyone else, we do not sell it, and we do not pass it to anyone for their own marketing.

International transfers

Netlify, Cloudflare and Google are American companies with infrastructure around the world, so some of the data described here is processed outside the UK. Where that happens it still has to be protected to a UK standard, and each provider is required to have a transfer safeguard in place.

We rely on the data processing terms each of these providers publishes, which set out the safeguard they use. If you would like to know which applies to a particular provider, ask us at admin@rabbli.com and we will tell you.

Your rights

UK GDPR gives you the following rights over personal data we hold about you. Some apply in every case, some only in particular circumstances, and we would rather say which is which than imply more than is true.

• To be told what we do with your data. That is what this page is for.
• To get a copy of what we hold about you. We will reply within one month. If the request is complex, or there are several, we can take up to two months longer, and we will tell you within the first month if we need to.
• To have anything inaccurate corrected.
• To have data erased, in certain circumstances.
• To have us restrict what we do with your data, in certain circumstances.
• To object to anything we do on the basis of legitimate interests. That covers most of what is described here, including how we handle your enquiry. Tell us and we will stop, unless we have compelling grounds not to.
• To withdraw your consent to analytics whenever you like, with no effect on anything else.
• To data portability, in certain circumstances. In practice it seldom applies here, because it does not cover processing based on legitimate interests.

There is no automated decision making and no profiling on this site. Nothing here decides anything about you without a person involved.

To use any of these rights, email admin@rabbli.com. It costs you nothing. We may ask you to confirm who you are before we send personal data to an email address.

Complaints

If you are unhappy with how we have handled your personal data, tell us first at admin@rabbli.com. We will acknowledge your complaint within 30 days of receiving it, look into it properly, keep you informed whilst we do, and tell you the outcome.

You can also complain to the Information Commissioner's Office, the UK's data protection regulator. You do not have to come to us first, although the ICO asks to see the complaint you made to the organisation, so raising it with us usually makes things quicker.

• Online: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113
• By post: the ICO publishes its current postal address on ico.org.uk

When we work for a client

Our actual business is building and running automations for other companies. When we do that work, the data belongs to the client. We handle it on their instructions under our contract with them, as a processor rather than a controller, and that contract governs it, not this notice.

So if you are a customer, employee or contact of one of our clients and you want to exercise a right over your data, the request goes to that client. They decide what happens to it. This page covers only what we do in our own right: this website, the enquiries we receive, and our own client and supplier contacts.

Changes to this policy

If we add something to the site that changes any of this, an embedded video, a booking tool, a contact form, this page is updated before it goes live. We also review it at least once a year, because the rules have moved several times recently and will again.

This version was published on 2 October 2026 and is next due for review on 2 October 2027.

Turning analytics off

This applies to this device and this browser only, because the setting is stored on your device and nowhere else. We hold no record of who has turned it off, and could not produce one if we were asked.