Privacy policy

Last updated 16 September 2026

The short version: this site sets no cookies, tracks nobody, and only holds what you deliberately send us.

Who we are

ATO Insight Solutions Ltd, a company registered in England and Wales, company number 17238290, registered in Northop, Flintshire, North Wales. We are the data controller for the personal data described on this page.

Contact: hello@atoinsightsolutions.co.uk.

Cookies — we don’t set any

This website sets no cookies. There is no advertising or tracking pixel, no session cookie and no fingerprinting. We count visits with Cloudflare Web Analytics, which uses no cookies, stores nothing on your device and does not identify you: it tells us things like how many people viewed a page and how fast it loaded. That is why you have not been shown a cookie banner: there is nothing to consent to. If that ever changes, this page changes first and you will be asked.

What happens when you visit

• Hosting. The site is hosted by Netlify, which keeps standard server logs including IP addresses for security and to serve the site. These are not used to profile you.
• Fonts. Typefaces load from Google Fonts. Your browser requests the font files directly from Google, which means Google receives your IP address as part of that request. Google sets no cookies for this. If you would rather avoid it, a content blocker will stop the request and the site still works.
• The sample workspace. It runs entirely in your browser with five invented clients. Nothing you type into it reaches us, and nothing survives closing the tab.
• The cost estimator. On our automation and dashboards pages, it runs entirely in your browser. Nothing you select is transmitted, stored or logged by us.

The forms on this site

Two forms collect personal data: the walkthrough request (your coaching name, email, best times and, if you give them, your brand colours) and the “keep me posted” box (your email only). Submissions are handled by Netlify Forms, part of the same service that hosts the site, and are emailed to us.

Our lawful basis for the walkthrough form is legitimate interests — you have asked us to get in touch. For “keep me posted” it is your consent, given by submitting the form; every email we send that way carries an unsubscribe link, and you can ask us to remove you at any time.

Walkthrough enquiries are kept for up to two years if nothing comes of them. “Keep me posted” addresses are kept until you unsubscribe or ask us to delete them. Neither list is sold or shared, and neither is used for anything other than what you asked for.

If you contact us directly

If you email or call, we hold what you send — your name, contact details and whatever you tell us — so we can reply and, if we go on to work together, keep proper business records. Our lawful basis is legitimate interests (responding to an enquiry) and, once you become a client, performance of a contract and our legal obligations for accounting records.

We keep enquiry correspondence for up to two years if it goes nowhere. Client records are kept for seven years after the engagement ends, because HMRC requires it. We do not sell or share your details, and we do not add you to a marketing list without asking.

The Operating System and client data

Where a coach runs their own edition of the Operating System, that coach is the data controller for the people who use it and we act as their data processor under a written agreement. Each edition is separated at the database level — no coach can see another coach’s clients.

A coach’s own content and methodology remains theirs. We do not use data held in one edition to train anything, to market to anyone, or to inform another coach’s edition.

How we keep it safe

• Data is encrypted in transit.
• Logins are password-protected, with reset, and each edition is walled off by row-level security in the database.
• Access is limited to the people who need it to run, fix or support the service, under a duty of confidentiality.
• Every edition is backed up weekly, with backups kept for at least three months.
• We hold cyber liability insurance.

If something goes wrong with data we hold for a coach, we tell them without undue delay and in any event within 72 hours of becoming aware, with what we know and what we are doing about it.

Your rights

You can ask us for a copy of the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to have it sent elsewhere. Email us and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you told us first, so we can put it right.

Changes

If this policy changes, the date at the top changes with it.