How we handle your data

This notice explains what personal data reaches Advantyx through this website, why, and what you can do about it. It covers the website only. Engagements have their own terms.

Who we are

Advantyx Limited (company no. 022128V), Portland House, Station Road, Ballasalla, Isle of Man IM9 2AE, is the controller of the data described here. Contact us about privacy through our contact form, by post at that address, or on +44 (0)1624 822816.

When you send an enquiry

The contact form asks for your name, email address, organisation, the type of matter and your message. We use them to reply and to decide whether we can help. The legal basis is our legitimate interest in answering enquiries, and taking steps at your request before any engagement.

Your enquiry is recorded in two places:

• Our email, through the firm’s Microsoft 365.
• Our client pipeline, on monday.com, hosted in its EU data centre.

The form also passes on where your visit started: the referring website or campaign, and the first page you landed on. It does this so we know which channels bring enquiries. It never includes anything you typed elsewhere on the site.

To keep the form free of spam, Cloudflare Turnstile checks that a person is sending it. That check processes technical data such as your IP address and browser details. To limit repeated submissions, we also keep a salted one-way fingerprint of your IP address for ten minutes. The salt changes daily and is deleted after two days, so the fingerprint cannot be traced back to your address.

Analytics

We use PostHog, hosted in the EU, to understand how the site is used. We look at which pages are read, where visitors come from, and how many reach the contact form. We do not use advertising trackers, and nothing is shared with advertisers.

• If you decline, or have not chosen yet: nothing is stored on your device. Visits are counted by PostHog using a daily, one-way hash of your IP address and browser. It cannot be reversed, and it resets each day. The legal basis is our legitimate interest in knowing how the site is used, which this does without identifying you or following you between days.
• If you accept: PostHog stores a random identifier on your device, so separate visits can be recognised as yours. We also store, on your device only, the first known source of your visits, so an enquiry can be attributed to it. The legal basis is your consent.

PostHog uses your IP address only to count visits and estimate your country. It does not keep the address itself.

Events we record include pages viewed, time on page, whether an article was read through, clicks on contact links, and that the contact form was started or sent. The content of the form is never sent to PostHog. If you accept and later send an enquiry, the analytics identifier is attached to your enquiry record. This lets us see which visits led to it.

You can change your choice at any time through Cookie settings in the footer.

What is stored on your device

Name	Set by	Purpose	When
ph_*_posthog*	PostHog	Random visitor and session identifier	Only after you accept
ax:first-touch	Advantyx	First known source of your visits	Only after you accept
__ph_opt_in_out_*	PostHog	Remembers your cookie choice	When you choose

Who else processes it

Cloudflare (hosting and spam protection), Microsoft (email), monday.com (client pipeline), PostHog (analytics) and Anthropic act as our processors under contract. Anthropic’s Claude prepares a weekly internal summary of the site’s analytics and of new enquiries. It reads our pipeline to count enquiries, and the summary itself contains only figures, never your details. Some of them are based outside the Isle of Man and the EU. Where data leaves those jurisdictions, they rely on adequacy decisions or standard contractual clauses.

Automated decisions

We do not make decisions about you by automated means. Analytics tells us how the site is used; it is never used to assess or score you as a person.

How long we keep it

• Enquiries that do not become engagements: kept for up to two years, then deleted.
• Enquiries that do become engagements: retained under the engagement’s own terms.
• Analytics data: kept for up to two years.

Your rights

Under the Isle of Man’s data protection law (the GDPR and LED Implementing Regulations 2018) you can ask for a copy of your data. You can also ask us to correct it, delete it, restrict its use or object to it, and you can withdraw consent at any time. Use our contact form or write to the address above.

If you are unhappy with how we have handled your data, you can complain to the Isle of Man Information Commissioner. If you are in the UK or the EU, you can complain to your own data protection authority.