Privacy notice
What personal data this website collects, why, and what your rights are. Engagement data is covered separately, in the engagement terms.
Last updated 23 August 2026
1. Controller
The controller for personal data collected through this website is Akil Ltd, trading as CAMI (company number [[COMPANY_NUMBER]], registered office [[REGISTERED_ADDRESS]]). Contact for anything in this notice: hello@cami.build.
2. What we collect, and why
| Data | When | Purpose | Lawful basis | Kept for |
|---|---|---|---|---|
| Name, work email, firm, role, firm size, your message | When you send an enquiry by the contact form or by email | To reply, and to arrange and scope a conversation about an audit | Legitimate interests (responding to an enquiry you made); then contract, if an engagement follows | 24 months after the last contact, or for the life of an engagement plus the period in its terms |
| Aggregated, cookieless usage statistics (page views, country, browser family, referrer) | When you visit | To understand which pages are read | Legitimate interests (running the site). No cookies, no individual identifier. | Held in aggregate only |
| Technical logs (IP address, request, timestamp) | When you visit or submit a form | Security, abuse prevention, bot screening on forms | Legitimate interests (keeping the site and forms safe) | Up to 30 days |
We do not run a mailing list from this site, and we do not sell or rent personal data.
3. Who processes data on our behalf
Sub-processors change as the site grows; this list is the current one.
| Provider | What for | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting and delivery of the site, DNS, email routing for hello@cami.build, cookieless analytics, bot screening on forms (Turnstile) | Global edge network; EU/UK data-processing terms |
| Resend, Inc. | Sending email from hello@cami.build | United States, under standard contractual clauses |
| Google LLC (Gmail) | Mailbox for hello@cami.build | EU/UK data-processing terms |
When the contact form is switched on it is handled by our own application hosted in the European Economic Area, with form records stored in a database in the United Kingdom; this notice will be updated with those providers on the day.
4. International transfers
Where a provider processes data outside the UK, we rely on the UK International Data Transfer Agreement or Addendum, or on an adequacy regulation, as applicable.
5. Your rights
Under the UK GDPR you may ask for access to your personal data, for correction or erasure, for restriction of or objection to processing, and for a copy in a portable form. Write to hello@cami.build; we respond within one month. You may also complain to the Information Commissioner’s Office (ico.org.uk).
6. Cookies
This site sets no cookies of its own and uses no advertising or tracking cookies. If the contact form is switched on, Cloudflare Turnstile may set a short-lived cookie strictly necessary for bot screening while you are on that page.
7. Engagement data
Personal data collected during an audit (interview notes, org-maps, working papers) is governed by the engagement terms, including the person-confidentiality promise described on our principles page, and not by this notice.
8. Changes
We may update this notice; the date above is the date of the current version.