Outreach privacy notice
Async Digital Ltd Cardiff, UK
This notice is for people Async Digital has written to, or may write to, without being asked first. It explains what details we hold about you, where they came from, why we hold them, how long we keep them, who else handles them, and how to tell us to stop.
Last updated
Who we are
Async Digital Ltd is the data controller for the details described here. Rob Nash is its director, and he is the person who writes to you. Our principal office is in Cardiff.
Async Digital Ltd is registered in England and Wales, company number 16950485. Our registered office is in London, and its address is under Contact below. We are registered with the Information Commissioner’s Office, registration number ZC271795.
What we hold about you
We hold your name, your role, your employer, and the work contact details that you or your organisation published. We also note where we found those details, and the reason we have for writing to you.
We do not collect personal email addresses, personal phone numbers or home addresses. We do not guess an email address from a naming pattern.
Where your details came from
Your details came from public sources where you or your organisation published them in a professional capacity. These are:
- Sell2Wales and Find a Tender notices;
- organisation websites;
- public repository pages, and an organisation’s own contact or security policy;
- professional profiles.
If you have worked with Rob before, your details come from his own working history.
Our first message to you says where we found your details.
Why we hold them, and our lawful basis
We hold your details to introduce Async Digital to you, business to business, about commissioned app builds and check audits. We only write to someone when we have a specific reason to write to them.
Under UK GDPR, our lawful basis is legitimate interests (Article 6(1)(f)). We write to a small number of people at most. Rob reviews, edits and sends each message himself, one at a time. An AI assistant may help draft a message, but nothing is sent automatically.
We make no automated decisions about you.
How long we keep them
- If we never contact you, we delete your details one month after we add them.
- If we contact you and you do not reply, we clear your name and address 90 days after our message.
- If you reply, we keep your details while we are talking, and clear them 12 months after the last message between us, unless you become a client.
- If you ask us not to contact you, we keep your name and address on a do-not-contact list, so that we never write to you again by mistake.
Who else handles them
Nobody outside Async Digital sees our list. We do not sell your details. These services handle them for us:
- Google, which stores the list. The list is held in the United States. Google is certified under the UK extension to the Data Privacy Framework, which covers that transfer.
- Anthropic, which provides the assistant Rob uses for research and for drafting messages.
- Exa, for web searches. Where possible, we search by organisation and role, not by your name.
- Rob’s email provider, which sends our messages.
Your rights
You have the right to object. Reply to our message and ask us to remove you. That is all you need to do. We will act on it within 5 working days, and add you to our do-not-contact list.
You also have the right to see the details we hold about you, to have them corrected, to have them erased, and to restrict how we use them. To use any of these rights, email privacy@async-digital.com.
You have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection, at ico.org.uk.
Changes to this notice
If we change how we handle these details, we will update this page and change the date at the top. The current version always lives at this address.
Contact
Async Digital Ltd
167–169 Great Portland Street, London, W1W 5PF
Registered in England & Wales, company number 16950485
ICO registration ZC271795
Director: Rob Nash
Privacy contact: privacy@async-digital.com