Privacy information

Last updated: 28 October 2026

Who is responsible

Noah Bundy trading as Conduvara is responsible for the personal information described here. Email [email protected] about privacy or to object to marketing. Our business details and postal address are available separately.

Information collected and where it comes from

For business research and relevant introductions, I use names, professional roles, employers, work email addresses, relevant published business information and records of the source, date, contact and response. Sources include company websites, careers pages, Companies House, professional profiles and Apollo's business contact database. An individual introduction identifies the source used for the role and address. Public availability does not mean that you agreed to marketing.

If you contact me, I use your message, contact details and information you choose to share to respond and discuss the service. Please do not include sensitive information or your customers' records in an initial enquiry.

Purposes and lawful bases

I use relevant professional information to research whether Conduvara may suit a business, make an individually relevant business introduction and respond to enquiries. The basis for relevant business research and introductions is legitimate interests in developing and offering a relevant business service, balanced against your expectations and rights. That does not override consent requirements for the type of recipient or communication. I do not treat sole traders and all partnerships as corporate email subscribers.

Where a discussion involves an individual taking steps to enter a contract, contract-related processing may apply. Company representative information is generally handled for legitimate interests in communicating with the business. I also keep necessary records to comply with legal obligations and honour objections.

Objections and control

You can object to direct marketing at any time by replying or emailing [email protected]. I will stop using your details for that marketing and retain only the information needed to avoid contacting you again. There is no account to create or fee to pay to opt out.

Service providers and AI-assisted preparation

Business records are held in local project files and Google Workspace email. Apollo is used to research business contact information. OpenAI tools assist with professional research, organisation and draft preparation, and Exa has been used to retrieve relevant published business pages. Outputs are reviewed; these tools do not decide whether you must buy or enter a contract. Professional contact information may be included in that preparation.

Cloudflare provides website hosting and security. Hosting and security providers may process IP addresses, request times, browser/device information and other technical information to deliver and protect the site. The site does not add advertising pixels, behavioural analytics, a contact database form or email-open tracking. Email links open your email service, whose own terms apply. Ordinary hosting/security logs are separate from advertising analytics.

Providers may have their own responsibilities for account, security and service information. Their notices and contractual terms describe their processing: Google Workspace data processing terms, Apollo privacy policy, OpenAI Europe privacy policy, Exa privacy policy and Cloudflare privacy policy.

Processing outside the UK

These services may process information outside the UK, including in the United States. Their published arrangements describe adequacy decisions and contractual safeguards, including standard contractual clauses and the UK addendum where applicable. The exact arrangements depend on the service and account terms. Contact me to request information about the arrangements applying to your information. I do not represent that all information stays in the UK or that every provider has identical retention or training terms.

Retention

I review research and contact records for relevance and accuracy rather than retaining unused details indefinitely. Unused research is reviewed within 30 days of collection. Closed or non-responsive leads are reviewed within 90 days after the last authorised contact. Information no longer needed is removed unless a documented legal or dispute reason applies. The review covers working copies, email, source extracts and audit copies, with provider backup and security retention handled under their terms.

A minimal suppression record is retained for as long as needed to honour an objection and is reviewed for accuracy. Necessary contract, tax and accounting records follow their applicable retention requirements. Service-provider backup and security retention may differ under their terms. You may ask what is held and request deletion where applicable.

Your rights and complaints

Depending on the circumstances, you can ask to access, correct, erase or restrict use of your personal information, and you have rights to portability where applicable. Where consent is relied on, you can withdraw it. The right to object to direct marketing is absolute. Contact [email protected] to exercise your rights.

You can complain to the Information Commissioner's Office. You do not have to contact me first.

The demonstration and a future pilot

The demonstration uses invented data and holds entries in page memory until cleared or reloaded. It does not send entries to a CRM, AI provider or calendar. Do not enter real personal data. Before any live pilot, access, processing instructions, providers, security, retention and responsibilities must be agreed for that client. This notice is not permission to process a client's customer records.