Privacy policy

Last updated 25 October 2026

Who we are

Umbra Penance (“we”) is a UK engineering company providing automation, custom software and security testing. We are the controller of the personal data described here. Contact: team@umbrapenance.com.

What we collect

Enquiries and call bookings: your name, work email, company, phone (optional), website (optional), your answers to the booking questions and anything you write to us.
Attribution data: the page you arrived on, the referring site, campaign parameters (such as UTM tags and ad click identifiers), browser type, screen size and time zone, so we know which channels bring enquiries.
Analytics and advertising cookies: only if you accept them in the cookie banner (see below).

Why we use it, and our lawful basis

To reply to your enquiry, arrange and prepare the call, and send a proposal: steps taken at your request before entering a contract, and our legitimate interest in responding to business enquiries.
To understand which pages and campaigns bring enquiries: legitimate interests (attribution data sent with your form) and consent (analytics and advertising cookies).
To keep business records: legal obligation where we become a supplier.

We do not sell your data, and we do not add you to a mailing list.

Who we share it with

Only service providers who process it on our behalf under contract:

Vercel (website hosting)
Google (email, calendar and video calls; Google Analytics and Google Ads only if you consent)
Airtable (our enquiry and client records)

Some of these providers process data outside the UK, for example in the United States. Where they do, transfers rely on the UK–US data bridge or the UK International Data Transfer Addendum.

How long we keep it

Enquiries that do not become projects are deleted within 24 months of our last contact. Client records are kept for as long as the law requires for accounting and contractual purposes.

Cookies

The site works without non-essential cookies. If you click “Accept” in the cookie banner, we use Google Analytics and Google Ads cookies to measure visits and the performance of our adverts. If you decline, those tools run in a restricted mode without cookies. You can change your choice at any time with the “Cookie settings” link in the footer.

Your rights

Under UK GDPR you can ask to access, correct, delete or restrict your data, object to our use of it, or receive a copy. Email team@umbrapenance.com and we will reply within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.