Privacy and Cookie Notice
Last updated: 9 October 2026
This notice explains how we use personal data when you visit circuitte.com, send us the project form, use the Client Portal (circuitte.com/musteri), a project Data Room or a project share link, or email us. It is written for the UK GDPR and the Data Protection Act 2018. Visitors in Türkiye can also read the KVKK notice (in Turkish).
1. Who we are
Circuitte is a brand of VERISAY LTD, trading as Verisay Software Technologies, company no. 15875425 (Companies House, England and Wales), registered office 338a Regents Park Road, Office 3 and 4, London N3 2LN, United Kingdom. VERISAY LTD is the controller of the personal data described here. Contact: info@circuitte.com.
In systems we build and run for our clients, the client is the controller for its users' data and we act as its processor, only on its instructions and under our contract. This notice does not cover that data.
2. What we use, why, and on what basis
| Activity | Data | Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|---|---|
| Project form and email | Name, email, phone, company; type of need, message, timeline, budget range | Replying to you, arranging a first call, preparing a proposal | Steps before entering a contract (6(1)(b)); legitimate interests (6(1)(f)) |
| Client Portal, Data Room, share links | Name, email, company and title; sign-in codes and session records, IP address, access and acknowledgement records; documents you share | Running the project, sharing documents, keeping access secure and recording who viewed what and when | Contract (6(1)(b)); legal obligation (6(1)(c)); legitimate interests (6(1)(f)) |
| Contracts and invoicing | Names, titles and contact details of client representatives; contract and invoice records | Entering into and performing contracts; accounting and tax | Contract (6(1)(b)); legal obligation (6(1)(c)) |
| Running and securing the site | IP address, browser data, strictly necessary cookies, server logs | Serving the site and preventing abuse and attacks | Legitimate interests (6(1)(f)) |
| Visit statistics (analytics cookies) | Cookie ID, pages visited, device and browser data | Understanding how the site is used and improving it | Consent only (6(1)(a)), given in the cookie banner and withdrawable at any time |
We do not sell your data and do not send marketing messages without separate permission. Your personal data is not used to train AI models.
3. Who we share it with, and international transfers
We share data with service providers for hosting (data centres in the European Union), transactional email and technical infrastructure, only as far as the service requires. If you accept analytics cookies, Google (Google Tag Manager / Google Analytics) receives data and may process it in the United States. Transfers from the UK to the EU rely on UK adequacy regulations. Transfers to the US rely on the UK Extension to the EU-US Data Privacy Framework where the recipient is certified, or on the International Data Transfer Agreement / Addendum. We disclose data to authorities only where the law requires it.
4. How long we keep it
- Enquiries that do not lead to a contract: up to 2 years.
- Contract, invoice and accounting records: as long as the law requires (up to 10 years).
- Client Portal and Data Room access records: for the project and up to 2 years after it ends.
- Cookies: as listed below.
5. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its use, to data portability, and to withdraw consent at any time without affecting earlier use. Email info@circuitte.com; we reply within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk). If you are in the EU, you can complain to your local supervisory authority.
6. Cookies
Strictly necessary cookies run the site and the portal and need no consent. Analytics cookies load only if you choose “Accept” in the cookie banner. If you choose “Reject”, Google Tag Manager is not loaded at all.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| cc_consent | Strictly necessary | Remembers your cookie choice | 180 days |
| cpSession | Strictly necessary | Client Portal session | For the life of the session |
| cpTheme | Preference | Client Portal light/dark theme | 1 year |
| _ga, _ga_* | Analytics (consent) | Google Analytics visit statistics, via Google Tag Manager | Up to 2 years |
You can change your choice at any time: . You can also delete or block cookies in your browser.
7. Changes
When we update this notice we change the date at the top. See also Legal information.