Privacy policy
How 48X handles website visitors, enquiries, and early client conversations.
Last updated: 3 May 2026
1. Who this covers
This policy covers personal data handled through 48x.dev and early conversations with prospective clients. It is written for UK visitors and business contacts. Client delivery work may also be covered by a separate data processing agreement, statement of work, or confidentiality agreement.
2. Controller
48X is the controller for personal data collected through this website and direct enquiries. For privacy questions, email paul@48x.dev.
3. Data we collect
If you contact us or submit the booking form, we may receive your name, work email, company context, the workflow or AI problem you describe, timing, and any other details you choose to include. The booking form submits to a website backend, sends the enquiry by email through Resend, and records the lead in Attio for follow-up.
4. Analytics
We use Vercel Web Analytics through the Analytics component in this site. Vercel Analytics provides aggregated website statistics such as page views, referrers, approximate location, device, operating system, and browser information. Vercel states that Web Analytics stores anonymised data and does not use cookies.
5. How we use personal data
We use personal data to reply to enquiries, assess whether 48X is a fit, prepare proposals, run intro calls, improve the website, and maintain basic business records. We do not sell personal data or use enquiry details for advertising profiles.
6. Lawful bases
We rely on legitimate interests to operate the website, understand business enquiries, and improve our services. Where we enter into an agreement, we process relevant data to take steps before a contract and perform that contract. We may also process data where needed for legal obligations.
7. Sharing
We share data only where needed with service providers that help run the website, email, lead capture, hosting, documents, calls, security, or professional advice. Those providers may include Vercel for hosting and analytics, Resend for email delivery, and Attio for enquiry records. We may also share information where required by law or to protect our rights.
8. International transfers
Some providers may process data outside the UK. Where that happens, we expect appropriate safeguards such as adequacy regulations, standard contractual clauses, or equivalent protections to be used.
9. Retention
We keep enquiry data only as long as needed for follow-up, business records, legal requirements, and relationship context. If an enquiry does not become an active opportunity, we aim to delete or archive it within 24 months unless there is a good reason to keep it longer.
10. Your rights
Under UK data protection law, you may have rights to access, correct, delete, restrict, or object to use of your personal data, and to complain to the ICO. To exercise rights, email paul@48x.dev.
11. Security
We use reasonable technical and organisational measures for the size and nature of the service. No website or email system is completely secure, so avoid sending highly sensitive material through the public booking flow.