What we collect, and what we do with it.

Who we are

The data controller for this website is One Tek Business Solutions Ltd (trading as OneTek), registered in England and Wales, company number 06667418, registered office Meridian House, Road One, Winsford, Cheshire, CW7 3QG. For anything in this policy, contact accounts@onetek.com or call 0161 475 6291.

This policy covers the marketing website only. Data inside the SmartFactory product — your production data, your users, your machines — is processed under the agreement we sign with your company, not under this policy, and it belongs to you.

What we collect

• What you give us. If you request a demo, register for a trial or contact us, we collect what the form asks for: your name, work email, company, role, a rough machine count, and anything you write in the message box. If you ring or email directly, we hold the correspondence.
• What your visit generates — only if you accept cookies. With your consent, our analytics (HubSpot, Google Analytics and Microsoft Clarity) record technical data: IP address, browser and device type, the pages you visited and how you arrived. Clarity also records how you use each page (clicks, scrolling and mouse movement) so we can replay a visit and see where a page confuses people. It masks what you type into form fields. If you decline, we set no analytics cookies and this data is not collected. Declining changes nothing about how the site works.

Why we use it, and the lawful basis

• Answering your enquiry or demo request — our legitimate interest in responding to people who contact us, and steps taken at your request before a contract.
• Providing a trial — steps taken at your request before a contract: we need your details to set the tenant up and hand it to you.
• Marketing emails — where you are a business contact at a company, partnership or other corporate subscriber, our legitimate interest in telling you about services relevant to your work, as permitted for business subscribers under PECR. Everywhere else, consent. Either way: we do not add you to a sequence because you asked a question, every marketing email carries an unsubscribe that works, and if you tell us to stop we stop — including by replying to say so.
• Website analytics — consent, given or refused on the cookie banner and changeable at any time.
• Legal obligations — where we must keep records, we keep them.

Cookies

Before you answer the banner, the site stores two kinds of thing, and neither tracks you:

• Your cookie choice, once you make one — kept in your browser so we do not ask on every visit. It holds nothing about you.
• Security cookies on our form pages. The demo and trial forms are served through HubSpot, whose provider sets a bot-protection cookie (__cf_bm) to tell a person from an automated attack. It is set as soon as a form page loads because that is what it is for, it lasts under an hour, and it is not used to profile you. Our forms also use Google reCAPTCHA to keep spam out, which contacts Google when a form page loads.

If you accept analytics cookies, three things set them. HubSpot sets its standard cookies (__hstc, hubspotutk, __hssc, __hssrc) to recognise return visits and connect a form you submit to the pages you read. Google Analytics sets _ga and _ga_CM5YSZ0HK7, loaded through Google Tag Manager, to count visits and show us which pages lead somewhere. Microsoft Clarity sets _clck and _clsk to stitch the pages of one visit into a single replay and heatmap. We use all three to understand what on the site is worth a visitor's time and to avoid ringing someone about a product they looked at once for eight seconds.

Decline and none of them is set, and Clarity does not load at all. Google Tag Manager itself loads on every page, but until you accept it is held in a mode that stores nothing on your device and Google Analytics does not run.

Here is the whole list, including how long each one lasts:

Only the first two are set before you answer the banner. Everything below them needs your acceptance first, and declining removes any of them already on your device.

We set no advertising cookies on this site, and we do not build advertising audiences from your visit. If that ever changes, the banner will ask you about advertising separately — accepting analytics will never be treated as agreeing to advertising.

You can change your mind whenever you like: use cookie settings (also linked in the footer of every page). Declining after you have accepted deletes the analytics cookies already on your device as well as stopping new ones — you do not have to go into your browser settings to undo it. Your answer lasts six months, then the banner asks again.

Who else sees it

• HubSpot — our CRM and analytics processor, on HubSpot's EU data residency. Enquiries and form submissions are stored there so the person who answers you can see what you asked.
• Google — Google Analytics and Google Tag Manager, if you accept analytics cookies, and Google reCAPTCHA on form pages. Google receives your IP address and the pages you view. We do not use it to build advertising audiences.
• Microsoft — Microsoft Clarity, if you accept analytics cookies. Microsoft receives your IP address, the pages you view and how you interact with them. We have told Clarity not to use advertising storage, and we do not use it to build advertising audiences.
• Our web hosting provider — serves this site and holds standard server logs.
• Nobody else, and never for money. We do not sell, rent or trade personal data.

Where a processor moves data outside the UK, it happens under recognised safeguards — adequacy decisions or standard contractual clauses. Ask us and we will send you a copy of the safeguards that apply.

How long we keep it

• Enquiries and demo requests: while the conversation is live, and up to two years after our last contact, then deleted or anonymised.
• Trial registrations: for the life of the trial tenant; a trial tenant is deleted on request, and your contact record follows the enquiry rule above.
• Analytics data: per HubSpot's standard retention, and deleted with your record when your record goes.

Your rights

Under UK GDPR you can ask us for a copy of your data, ask us to correct it, delete it, restrict what we do with it, take your data elsewhere, and withdraw any consent you have given — none of it affects the service you get from us.

You can also object to processing we base on legitimate interest, which here means our marketing email to business contacts. Tell us and we will stop; you do not have to give a reason.

Email accounts@onetek.com and we will deal with it; we do not make you fill in a form to be forgotten.

If you think we are handling your data unlawfully, you have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would take it as a kindness if you told us first, so we can fix it.

Changes

If this policy changes materially, the date at the top changes with it, and anything that needs fresh consent will ask for it rather than assume it.