Privacy Policy
Last updated: .
Who we are
AutoOps Lab is the trading name of Ilya Ovtsyn, a sole trader operating from West Ealing, London, W13 0FU, United Kingdom. Ilya is the controller responsible for personal information used for AutoOps Lab's own website and business enquiries. Contact hello.autoopslab@gmail.com with privacy questions or rights requests.
Information we collect
Our website links to a workflow-review form and an onboarding form on Tally, and offers email contact. These forms open on Tally’s website; they are not embedded here.
For a workflow review, we require an email address and a brief request. Your name, business name, enquiry sources, existing tools and extra context are optional. Onboarding is for use after a suitability discussion: it asks for business and contact names, email and an accuracy confirmation, with other relevant business or process information optional. Branding, files, routing addresses and account identifiers are deferred until needed for agreed work.
We also receive information you send by email. Website requests include technical information such as IP address, requested page, request time, country and response code. Form services and spam protection also process technical information about your browser and submission.
Please provide only information relevant to your request. Do not include passwords, verification codes, API keys, payment-card details, unnecessary sensitive information or customer records.
Why we use information
We use enquiry information to assess requests and reply by email. If work is agreed, we use the information needed to arrange and deliver it. We do not use enquiry information for marketing.
For general business enquiries and correspondence, we rely on legitimate interests in responding to requested contact and assessing whether our services are suitable. For website delivery, security and abuse prevention, we rely on legitimate interests in providing and protecting the website and its visitors.
Where information is necessary for specific steps you ask us to take towards a contract with you as an individual, including a sole trader, or to perform that contract, we rely on contract. This does not apply automatically to a person contacting us for a company. We assess what information is necessary at the relevant stage.
You can object to processing based on legitimate interests as explained below. Optional Cloudflare Web Analytics/RUM is disabled. We will review the purpose, lawful basis and any required choices before introducing optional analytics or a new use of enquiry information.
Providers and client work
Tally BV provides the forms and stores responses on our behalf. Built-in owner notifications send submitted answers by email to hello.autoopslab@gmail.com. Tally uses an email delivery provider, SendGrid, for these notifications. We use a Gmail account for direct correspondence. Google provides consumer Gmail under its own Terms of Service and Privacy Policy, and states that it does not act as a processor for that service.
Cloudflare hosts and protects the website. Provider handling of information is described in Tally’s privacy and processing information, Google’s Privacy Policy and Cloudflare’s Privacy Policy. Those policies supplement this notice; they do not replace our responsibilities.
Ilya is the sole owner and only person with direct access to AutoOps Lab’s accounts. There are no employees or contractors. Providers may process information through their authorised staff and suppliers.
Make and Airtable are planned tools and are not currently used for our enquiry routing. Before activating them or handling live client information, we will establish the relevant scope, provider and processing arrangements and update privacy information where needed.
Client-owned production accounts are the default. Any AutoOps Lab-managed exception, ownership, authorised access, fees and handover must be expressly agreed. Where we process personal information on a client’s instructions, appropriate written processing terms must be in place before that processing begins. Account ownership alone does not determine the parties’ data-protection roles.
Overseas processing
Our providers operate internationally, including through support and suppliers. Tally is based in Belgium and states that form data is stored in Europe; email notifications involve SendGrid in the United States. Google and Cloudflare may process information in the United States and other countries.
UK adequacy regulations cover transfers to the European Economic Area. Google describes its participation in the UK Extension to the EU–US Data Privacy Framework and its use of standard contractual clauses where required in its data-transfer information. Cloudflare’s Data Processing Addendum provides UK transfer terms, including the UK Addendum to the standard contractual clauses for relevant restricted transfers. Tally describes its supplier arrangements in its Data Processing Agreement and subprocessor information.
Contact us for information about the safeguards relevant to our use of a provider and how to obtain a copy, subject to necessary redactions.
How long we keep information
We review enquiry records monthly. We delete closed or inactive unsuccessful enquiries within three months of the last meaningful contact, or sooner if no longer needed. We keep active enquiries only while needed for the ongoing request and reconsider that need at each review.
This covers the Tally response, Gmail correspondence and notification copies, and any exports or other copies we control. Deleting a form response does not delete its notification email, so those copies are handled separately. Any exceptional longer retention must have a specific documented purpose or legal requirement.
Provider recovery and backup systems may retain deleted information for a limited further period. Tally states that deleted form data is permanently removed from its backups within 90 days. Gmail normally permanently deletes messages after 30 days in the Bin. Google describes further deletion and backup delays in its retention information. These are separate from our three-month enquiry policy.
Security and operational logs follow the relevant provider’s product and plan retention and are used only where needed for delivery, fault investigation and protection. They are not covered by the enquiry retention period. We do not routinely export visitor histories. Before paid work begins, relevant contractual, financial and client-record retention will be set for that work; this notice does not set a general six-year period.
Website hosting and analytics
Our website is hosted on Cloudflare. Cloudflare processes technical information, including IP addresses, requested pages and request times, to deliver and protect the website. Optional Cloudflare Web Analytics/RUM is currently disabled.
For further information about Cloudflare's handling of personal data, see Cloudflare's Privacy Policy.
Cookies and security
The website does not save your selected demo video between visits. Optional Cloudflare Web Analytics/RUM is disabled. Cloudflare may issue security cookies or challenges to deliver and protect the website; these differ from optional analytics.
Tally forms are separate from this website and use Tally’s platform security and abuse protection. We do not use optional analytics or Google reCAPTCHA on the forms. Tally and its security providers may process technical information and use security cookies or similar technologies to protect the service. See Tally’s privacy information. If you cannot use a form, contact us by email instead.
We limit direct account access to the owner and use two-step verification and recovery arrangements. No online service can guarantee complete security. Please avoid sending credentials or unnecessary sensitive information.
Your rights and complaints
You can object to processing based on legitimate interests by contacting us and explaining your circumstances. An objection needs an individual assessment of whether processing must stop or there are grounds to continue. An unexpired retention period alone is not a reason to keep information that is no longer needed.
Depending on the circumstances and lawful basis, you may have rights of access, rectification, erasure, restriction, portability and objection. If processing relies on consent, you can withdraw it without affecting processing that was lawful before withdrawal. Rights have exceptions and do not all apply to every record.
Contact hello.autoopslab@gmail.com to make a request. Identity may need to be checked proportionately; privacy-rights requests are handled within the timescales required by law. The absence of an ordinary enquiry response deadline does not change those statutory requirements. You can raise a concern with us and complain to the Information Commissioner's Office (ICO). See also GOV.UK information on data protection rights.
Changes to this notice
This notice covers AutoOps Lab’s website and own enquiries. It does not replace a client’s privacy notice or the written arrangements for a client project. We will update it when our purposes, providers or handling practices materially change. The date above identifies the latest version.
Back to top