Autonomic Ltd operates the website at autonomic.build and provides fractional commercial operating and agentic GTM services to B2B SaaS businesses.
For the purposes of UK data protection law, Autonomic Ltd is the data controller — the organisation that decides why and how your personal data is used.
Autonomic Ltd
Director: Scott Sampson
Email: scott@autonomic.build
Website: autonomic.build
We collect personal data in two ways: when you submit the intake form on our site, and when you contact us directly by email.
| Data | Source | Why we collect it |
|---|---|---|
| First name, last name | Intake form | To address you personally |
| Job title | Intake form | To understand your role and seniority |
| Business name | Intake form | To understand the organisation |
| AI outcomes sought | Intake form | To qualify fit before a call |
| Business transformation goals | Intake form | To prepare a relevant diagnostic |
| Current ARR | Intake form | To identify the right engagement model |
| Investment stage | Intake form | To calibrate the operating approach |
| Commercial team size | Intake form | To size the engagement appropriately |
| Biggest challenges | Intake form | To prioritise where to start |
| Email address, name, message content | Direct email | To respond to your enquiry |
We do not collect payment data, national insurance numbers, health data, or any special category personal data.
We do not collect data from children. Our services are directed at business professionals aged 18 and over.
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
We use the information you provide solely to:
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
We do not sell your data to third parties. We do not share it with advertisers, data brokers, or marketing platforms.
We use one third-party data processor: Netlify, Inc., which hosts this website and processes intake form submissions on our behalf.
| Processor | Role | Location | Data shared |
|---|---|---|---|
| Netlify, Inc. | Website hosting and form submission storage | United States | All intake form fields; IP address (server logs) |
Netlify acts as a data processor under our instructions — they do not use your data for their own purposes. Our relationship with Netlify is governed by their Data Processing Agreement (DPA), which we have executed.
Log into your Netlify account. Navigate to Team settings → General → Data Processing Agreement. The DPA is available there as a downloadable PDF. You can also read the current version at netlify.com/legal/data-processing-agreement.
Keep a downloaded copy on file as evidence of your compliance obligation. No counter-signature is required — Netlify's DPA is a standard agreement accepted by using their platform.
We may disclose your data to law enforcement or regulatory authorities where required by law.
Netlify is headquartered in the United States. Your form submission data is transferred to and stored on Netlify's servers, which may be located in the US or other countries outside the UK.
Under UK GDPR, we are required to ensure adequate safeguards are in place for any transfer of personal data outside the UK. Netlify's Data Processing Agreement incorporates the UK International Data Transfer Agreement (IDTA) and Standard Contractual Clauses (SCCs), which provide the legal basis for these transfers.
All web fonts on this site are self-hosted on autonomic.build. No font requests are made to Google's servers or any other third-party CDN.
| Data type | Retention period | Reason |
|---|---|---|
| Intake form submissions | 12 months from submission | To enable follow-up and reference during any ongoing engagement discussion |
| Email correspondence | Duration of any commercial relationship + 2 years | Business record keeping and potential contractual reference |
| Netlify server logs (IP address) | 30 days (Netlify's default) | Security and abuse prevention |
| Cookie consent preference | Until cleared by you in browser settings | To avoid asking for consent on every visit |
Where an engagement proceeds to a signed contract, we retain relevant pre-contract correspondence for the duration of that contract plus 6 years, as required under UK business record keeping obligations.
To request deletion of your data before these periods expire, contact us at scott@autonomic.build. We will respond within 30 days.
Under UK GDPR, you have the following rights in relation to your personal data:
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Ask us to delete your data where there is no longer a lawful basis to hold it.
Ask us to pause processing while accuracy or legitimacy is under dispute.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests. We will comply unless we can demonstrate compelling grounds to continue.
To exercise any of these rights, email scott@autonomic.build with the subject line Data Rights Request. We will respond within one calendar month, as required by UK GDPR.
There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.
This website uses a small number of cookies and browser storage mechanisms. Under PECR (the Privacy and Electronic Communications Regulations), we ask for your consent before setting non-essential cookies.
| Name | Type | Purpose | Expires |
|---|---|---|---|
ck_autonomic |
Essential | Stores your cookie consent preference so we do not prompt on every visit | Until cleared by you |
| Self-hosted fonts | Essential | Web fonts are served directly from autonomic.build. No requests are made to Google's servers. | n/a |
| Analytics (future) | Analytics (consent required) | Not yet active. If added, will only fire with your explicit consent | n/a |
You can withdraw cookie consent at any time by clearing your browser's local storage or cookies for autonomic.build. You can also adjust your browser settings to block all cookies, though this may affect site functionality.
If you have a concern about how we handle your personal data, please contact us first at scott@autonomic.build. We take complaints seriously and will respond within five working days.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters:
Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Post: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We may update this policy as our data practices change or as UK data protection law evolves. When we make material changes, we will update the effective date at the top of this page.
The current version of this policy is always available at autonomic.build/privacy.