How your details are used.
This notice explains how SYSADAN uses personal data, in line with UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Last updated: 2 September 2026
Who is responsible
SYSADAN is a one-person studio run by Yasmin Adan, based in London, United Kingdom. I am the data controller for personal data collected through this website and related enquiries.
Contact: yasmin@sysadan.com
The laws this notice follows
Because SYSADAN is based in the UK and handles personal data of people in the UK, the relevant rules are:
- UK GDPR and the Data Protection Act 2018: how personal data is collected, used, stored and shared, and the rights you have.
- PECR: cookies, similar tracking technologies, and electronic marketing messages.
If you are in the European Economic Area, the EU GDPR may also give you similar rights. The Information Commissioner’s Office (ICO) is the UK regulator for this. You can complain to the ICO at any time: ico.org.uk/make-a-complaint.
What I collect
When you send an enquiry
The contact form asks for your name, email, business name, what your business does, what you would like to improve, and how the process currently works. Website address is optional. If you email me instead, I will have whatever you choose to include in that message.
When you use the website
This site does not use analytics tools, advertising pixels or marketing cookies. It does load fonts from Google Fonts, which means Google may receive your IP address and browser details when a page loads. The hosting provider for the site will also process standard server logs, which can include IP address, browser type, pages visited and the date and time of the request.
If we work together
If we start a project, I may hold extra details needed to do the work, such as names and emails of people on your team, and information you share about your processes. How that is used is also covered in the project agreement.
Why I use it, and the legal basis
UK GDPR requires a lawful basis for each use of personal data. For SYSADAN that is:
- Enquiries and pre-contract conversations: to reply, understand whether I can help, and discuss a possible project. Legal basis: taking steps at your request before entering a contract (UK GDPR Article 6(1)(b)), and legitimate interests in running a small business and responding to genuine enquiries (Article 6(1)(f)).
- Doing the work, if we agree a project: to deliver, invoice and support the system. Legal basis: contract (Article 6(1)(b)) and, where needed, legitimate interests (Article 6(1)(f)).
- Legal and tax records: invoices and records I am required to keep. Legal basis: legal obligation (Article 6(1)(c)).
- Running the website: hosting and fonts so the site can load. Legal basis: legitimate interests (Article 6(1)(f)).
I do not use your details for unrelated marketing, and I do not sell personal data. I will not send marketing emails unless you have asked for them, which PECR requires.
Who else sees it
I do not share enquiry details with other businesses for their own marketing. I may use trusted providers who process data for me, such as:
- the company that hosts this website
- the email service I use to send and receive mail
- Google, for the fonts loaded on the site
Those providers should only use the data to provide their service. If a tool stores data outside the UK, I will rely on a lawful transfer mechanism such as the UK’s adequacy decisions or standard contractual clauses.
I may also share information if the law requires it, or if it is necessary to protect legal rights.
How long I keep it
Enquiry details are kept only as long as needed to handle the conversation, then deleted, unless we agree to work together or I need to keep a short record of why a project did not go ahead.
If we work together, project and invoice records are kept for as long as the work and UK tax rules require, typically up to six years after the end of the relevant tax year for financial records.
Cookies
Under PECR, non-essential cookies need consent. This site does not set analytics or advertising cookies, so there is no cookie banner. If that changes, this notice will be updated and consent will be requested first where the law requires it.
Your rights
Under UK GDPR you can ask me to:
- access the personal data I hold about you
- correct it if it is wrong or incomplete
- delete it, in certain cases
- restrict or object to how it is used
- receive a copy in a portable format, where that right applies
You do not have to use the form. Emailing is enough. I will respond within one month, unless the request is complex, in which case I will tell you if I need more time. You also have the right to complain to the ICO if you are unhappy with how your data has been handled.
This website is aimed at businesses, not at children.
How to contact me
For anything in this notice, email yasmin@sysadan.com using the address you used on the form if you have already been in touch.