Privacy Policy

Robishto is the controller of personal information described in this policy. We provide technology services to small and medium-sized businesses in the UK.

For privacy questions or requests, email info@robishto.co.uk.

We may collect:

• your name, work email address, company name and the information you include in an enquiry;
• correspondence, meeting notes, proposals and records created while discussing or delivering work;
• basic technical and security data supplied by our website hosting provider, such as IP address, browser type, requested page, date and time; and
• billing and transaction records where you become a client.

Please do not send passwords, payment card details, health information or other sensitive personal information through the enquiry form.

• To respond to enquiries and take steps towards a contract. We use the information you provide to understand your request, arrange a discussion and prepare a proposal.
• To provide agreed services. Processing may be necessary to perform a contract with you or the organisation you represent.
• To operate and secure the website and our business. We rely on our legitimate interests in preventing misuse, maintaining records and improving how we work, provided those interests do not override your rights.
• To meet legal obligations. This includes tax, accounting, fraud prevention and responding to lawful requests.

The website may use strictly necessary storage required for security or essential functionality. Robishto does not intentionally use advertising cookies.

If non-essential analytics are introduced, they will not be activated until an appropriate consent choice is provided. This policy will be updated to identify the service, purpose and retention period.

We only share personal information where needed with service providers that support hosting, email, business administration and professional advice. We may also disclose information where required by law, to protect legal rights or in connection with a business reorganisation.

Providers must handle information under appropriate contractual and security obligations. We do not sell personal information.

Some technology providers may process information outside the UK. Where this happens, we use providers and transfer mechanisms recognised by UK data protection law, such as UK adequacy regulations or approved contractual safeguards. You may contact us for further information about safeguards relevant to your data.

• Enquiries that do not become client work are normally retained for up to 24 months after the last meaningful contact.
• Client contracts, invoices and core delivery records are normally retained for six years after the relationship ends where needed for legal, tax and accounting purposes.
• Routine website security logs are normally retained for no longer than 12 months unless an incident requires longer investigation.

Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, portability or object to its use. Where processing relies on consent, you may withdraw that consent at any time. These rights are not absolute and exemptions may apply.

You have the right to object to processing based on legitimate interests and to direct marketing.

Email info@robishto.co.uk to exercise a right. We may need to verify your identity.

Please contact us first if you have a concern. You may also complain to the Information Commissioner’s Office through ico.org.uk or by calling 0303 123 1113.

We may update this policy when our services, providers or legal obligations change. The effective date at the top shows the latest revision.