Who I am
I'm Joshua Heath. I run Mortise, a one-person automation consultancy in Northamptonshire, as a sole trader. I decide how the personal information described here is used, so under UK data protection law I'm its "controller".
Contact me about anything in this notice:
- Email: joshua@mortiseautomation.com
- Phone: +44 7856 198822
The short version
- I only use the information I need, and I never sell it.
- If you run a limited company, I may have found your business details in public sources and emailed you about my services. You can tell me to stop at any time, and I will.
- If you get in touch, book a call or work with me, I use your details to reply, to do the work, and to keep the records the law requires.
If I've contacted you about my services
I look for established UK businesses that might benefit from what I do, and I email some of them. I only email limited companies and limited liability partnerships. I never send marketing emails to sole traders or partnerships without their consent.
What I collect:
- the name and role of a director or member, as shown on the Companies House register;
- a business email address and phone number;
- public information about the company: its Companies House record, what its own website says about how it works, and whether it's listed on Google Maps;
- my notes, a draft of the email I plan to send, and any emails we exchange.
Where it comes from:
- the Companies House register;
- your company's own website;
- Google Maps, which I use only to find your website (I keep nothing from Google except the listing's ID);
- Hunter.io, a service that finds business email addresses published online, when your website doesn't show one.
Why, and my lawful basis: I rely on legitimate interests: finding businesses my services could help and telling them about it. I've weighed this against your interests. I use only business contact details, contact companies rather than individuals, write to each business personally, make saying no easy, and don't share your details for anyone else's marketing. You can ask me for a copy of my assessment.
How I use it: I keep these details in a private Google Sheet. Software gathers the public details, and an AI service, Anthropic's Claude, summarises what your website says and drafts a first email. I read and edit every email and send it myself; nothing is sent automatically. A simple score, based on things like how long the company has traded, the size of its accounts and whether it has a Google listing, decides which businesses I look at first. It doesn't affect you in any legal or similarly significant way.
How long I keep it: If we haven't been in touch for 6 months, I delete your personal details. I keep only your company's registration number and a status note, so I don't add the company again by mistake. Temporary copies of your website's public pages are deleted at least once a month.
Your right to object. You can object to direct marketing at any time, free of charge. Reply "no thanks" to my email or write to joshua@mortiseautomation.com, and I'll stop. I keep your company's registration number and a note of your request, so you won't hear from me again.
If you get in touch, book a call or work with me
What I collect: your name, email address, phone number and company, and whatever you tell me. This might come through the contact form on my website, by email or phone, or through a call you book with Calendly, which also records the time you choose and any answers you give.
Why, and my lawful basis:
- to reply to you and arrange a call: legitimate interests, or steps you've asked me to take before we agree any work;
- to deliver work we've agreed: our contract;
- to keep invoices and accounts: a legal obligation under UK tax law.
If I build something for you that handles your customers' or staff's personal information, I'll do that only on your instructions, and we'll agree in writing how that information is handled.
How long I keep it: If you don't become a client, I delete your enquiry details after 12 months. I keep client records for 6 years after the end of the tax year in which our work ends, because the law requires me to keep business and tax records.
My website
My website is hosted by Lovable and sets two cookies:
__dpl, a technical cookie the hosting platform uses to deliver the site;session-id, an analytics cookie that lasts 30 minutes. Lovable's built-in analytics uses it to count visits and see which pages are read, and Tinybird processes the visit data for Lovable. I don't use it to identify you.
You can block or delete cookies in your browser settings.
Who else handles your information
I use these services to run my business. Each handles personal information on my behalf and only as I instruct:
- Google (Google Workspace): my email, and the Google Sheet where I keep business contacts;
- Anthropic: the Claude AI service that summarises websites and drafts emails;
- Hunter.io: finding business email addresses;
- Calendly: call bookings;
- Lovable, Tinybird and Cloudflare: my website, its contact form and its visit statistics.
I'll also share information when the law requires me to. I never sell personal information.
Transfers outside the UK
Some of these providers store or process information outside the UK, for example in the EU or the USA. When they do, the transfer is covered by UK adequacy regulations (including the UK–US data bridge for certified US companies) or by the UK's international data transfer agreement or addendum in the provider's data protection terms.
Your rights
You have the right to:
- ask for a copy of your personal information;
- ask me to correct it or delete it;
- ask me to limit how I use it;
- object to how I use it, including direct marketing at any time;
- in some cases, ask for your information in a format you can take to another service.
To use any of these rights, email joshua@mortiseautomation.com. It's free, and I'll reply within one month.
Complaints
If you're unhappy with how I've handled your information, please tell me first so I can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
I'll update this page if the way I use personal information changes. The date at the top shows when it last changed.