Privacy Policy
Last updated: 2 November 2026
This policy explains how autoFactsheet collects and uses personal data when you visit autofactsheet.com or contact us. We keep the personal data we collect to a minimum, and we never sell it.
1. Who we are
autoFactsheet is a trading name of J.S. Kennard, a sole trader based in the United Kingdom. For the purposes of UK data protection law, J.S. Kennard trading as autoFactsheet is the controller of your personal data.
Email: privacy@autofactsheet.com
We intend to transfer the business to a limited company. If we do, we will update this policy and the company will become the controller of your data.
2. The personal data we collect
| What | When |
|---|---|
| Your name, work email address, company name, the number of funds you manage and any comments you add | When you submit a request form on our website |
| Your name, work email address, company name and whether you would like occasional updates | When you download a guide, such as our CCI readiness checklist |
| Your answers about your firm's funds, documents and plans and, if you choose to give them, your name, work email address, firm, role and whether you would like updates | When you complete our online CCI readiness check |
| Anything else you choose to tell us, plus any fund data or documents you send us for a sample factsheet | When you email us or reply to our messages |
| Basic technical data, such as your IP address, browser type and the pages you request | Automatically, in the server logs kept by our hosting provider when you visit the site |
Our services are for businesses. We do not knowingly collect data from children, and we ask you not to send us any special category data (for example, health information).
3. How we use your data and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Replying to your enquiry, arranging a call and preparing a sample factsheet | Legitimate interests: responding to business enquiries. Where you ask us to take steps before entering into a contract, also contract. |
| Occasional follow-up emails about our services to people who have contacted us | Legitimate interests: business development. You can opt out at any time. |
| Sending you a guide you asked to download | Legitimate interests: providing the guide you requested |
| Sending occasional updates on CCI and factsheet rules, if you ticked the box when downloading a guide | Consent. You can withdraw it at any time by replying "unsubscribe" or emailing info@autofactsheet.com |
| Showing and sending your CCI readiness results, and publishing combined, anonymous survey results | Legitimate interests: providing the check you requested and understanding how firms are preparing for CCI |
| Running, securing and improving the website | Legitimate interests: keeping the site secure and working properly |
| Keeping records and meeting our legal and tax obligations | Legal obligation |
We do not use your data for automated decision-making or profiling.
4. Fund data you send us
If you send us fund or portfolio data so we can prepare a sample factsheet, we use it only for that purpose. We treat it as confidential and delete it when the pilot ends, unless you become a client. These files are normally business data rather than personal data. Where they do contain personal data, for example names in a document, the same protections apply.
5. Who we share your data with
We share personal data only with service providers that help us run the business. They may use it only on our instructions:
- Netlify, Inc.: website hosting and processing of our website forms
- GoDaddy and Microsoft (Microsoft 365): business email
- Google (Google Fonts): delivers the website's fonts, which means your browser sends your IP address to Google
- Cloudflare, Inc. (Cloudflare Web Analytics): counts page visits so we can see which pages are useful
- Google (reCAPTCHA): checks that our website forms are completed by a person and not by a spam program. When a page with a form loads, your browser sends Google information such as your IP address and how you use the page
- Professional advisers, such as our accountant, where needed
We may also disclose data if required by law, or to a buyer or successor if the business is transferred.
6. International transfers
Some of our providers are based in, or have staff in, the United States or other countries outside the UK. Where personal data is transferred outside the UK, we rely on the safeguards the law allows, such as UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the UK International Data Transfer Addendum to standard contractual clauses.
7. How long we keep your data
- Enquiries that don't lead to business: up to 24 months after our last contact with you, then deleted
- Client records: for the length of the relationship and up to 6 years after it ends, to meet legal and tax requirements
- Sample-factsheet data: deleted when the pilot ends, unless you become a client
- Server logs: kept for a short period by our hosting provider in line with its own policy
8. Cookies
autofactsheet.com does not use advertising or tracking cookies, so we do not show a cookie banner.
Pages with a form (for example, to request a sample or download a guide) use Google reCAPTCHA to block spam. reCAPTCHA may set a cookie that is strictly necessary for this security check. It is used only to protect our forms, not for advertising. Our lawful basis is legitimate interests in keeping the website secure. See Google's Privacy Policy.
We use Cloudflare Web Analytics to count page visits. It does not set cookies, does not store anything on your device and does not track you across other websites. It records information such as the page visited, the referring website, your browser type and your general location (country). We use these figures only in aggregate, to understand which pages are useful. Our lawful basis is legitimate interests in running and improving the website.
9. Your rights
Under UK data protection law, you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data deleted
- restrict or object to our use of your data, including for marketing at any time
- receive your data in a portable format
To exercise any of these rights, email privacy@autofactsheet.com. We will reply within one month. Exercising your rights is free.
10. Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. If you are in the EU, you can contact your local data protection authority.
11. Security
We use reputable providers, encrypted connections (HTTPS) and multi-factor authentication on our accounts. We limit access to personal data to people who need it. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your data.
12. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it last changed.