Privacy Policy

Who we are

Datuma is a UK-based CRM data integrity product operated from datuma.co.uk. This policy covers the datuma.co.uk website and the free demo offered at datuma.co.uk/demo. For all privacy queries, contact hello@datuma.co.uk.

What data we collect via the website

When you complete the demo form at /demo, we collect:

• Your name
• Your work email address
• Your organisation name
• The contact CSV you upload for processing

We also collect standard server and analytics information (request logs, page views, approximate location from IP) to operate and secure the site.

What data we process during enrichment

The free demo processes the contact CSV you upload. For each row, minimal identifiers (name, email, LinkedIn URL where present) are sent to our enrichment API provider for lookup. The provider returns professional and organisational data, which is scored by Datuma and written back into the demo result delivered to you. Contact CSVs are processed, not stored permanently.

Data retention

• Enrichment data: purged from our pipeline after processing. Raw uploads are not retained long-term.
• Demo data: purged within 7 days of the demo completing.
• Enrichment API provider: retains the minimal lookup identifiers for the term of the agreement and deletes them within 60 days of termination under a formal Data Processing Addendum.
• Client databases: for paying clients, retention is governed by the Datuma Client Agreement and the client's own Supabase instance, not by this policy.

Third-party processors

We rely on the following infrastructure partners to deliver the demo and the website:

• Supabase — PostgreSQL database hosting, EU region.
• n8n — workflow automation for the enrichment pipeline.
• EnrichLayer — enrichment API provider, operating under a formal Data Processing Addendum.
• Netlify — website hosting for datuma.co.uk.
• Slack — internal notifications when demo batches are received and processed.

Each partner operates under appropriate data processing agreements. A full sub-processor list is available on request.

Cookies

datuma.co.uk uses a minimal set of cookies. We do not set third-party tracking or advertising cookies. Any cookies used are strictly essential for the site and demo form to function.

Your rights

Under UK and EU data protection law, you have the following rights in relation to personal data we hold about you:

• Right of access
• Right to rectification
• Right to erasure
• Right to data portability
• Right to object to processing
• Right to restrict processing

To exercise any of these rights, email hello@datuma.co.uk.

Legal basis for processing

• Free demo: legitimate interest in evaluating the product on data you have chosen to upload, together with your request to run the demo.
• Paying clients: performance of the contract set out in the Datuma Client Agreement.
• Website operation and security: legitimate interest in running a secure, functioning site.

International transfers

Where personal data is transferred outside the UK or the European Economic Area, transfers take place under EU Standard Contractual Clauses (Commission Implementing Decision 2021/914) supplemented by a UK International Data Transfer Addendum. Our enrichment API provider operates under these mechanisms as part of its Data Processing Addendum with Datuma.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page shows when it last changed. Material changes will be reflected here before they take effect.

Contact

For any privacy or data protection query, email hello@datuma.co.uk.