Legal
Privacy notice
Last updated: 28 October 2026
This website, www.getappoint.co.uk, is published by Appoint Group Limited (Appoint, we, our or us), a company registered in England and Wales with company number 16912796. Our registered office is at 124-128 City Road, London EC1V 2NX.
We are the controller of the personal data described in this notice: the organisation responsible for deciding how and why it is used. We are registered with the ICO, the UK's data protection regulator, under registration reference ZC099445.
This notice explains what personal data we collect through this website and when you correspond with us, why we use it, who we share it with, how long we keep it, what rights you have, and how to contact us or the regulator if you have a concern. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Questions about this notice, or about your personal data, go to hello@getappoint.co.uk.
What this notice covers
This notice applies to:
- visitors to this website;
- people who email us, including anyone who uses the "Register interest" or "Talk to us" links on this site;
- people we correspond with in the course of our business: prospective customers and the people who work for them, investors, advisers, suppliers and the people who introduce us to one another.
It does not cover the Appoint platform at app.getappoint.co.uk. That is a separate, signed-in service, used under agreement with the organisations that subscribe to it, and this notice does not describe it. If you have a question about the platform, contact us using the details at the end of this notice.
The personal data we collect, and where it comes from
When you visit this website
This website has no accounts, no sign-in and no forms. It sets no cookies and runs no analytics or tracking. Our cookie policy explains this in full.
Like any website, our pages are served by a hosting provider, and each request to them is logged. The log records the IP address your device connects from, the page you asked for, the time, and details of your browser and device. Our host, Vercel, may derive an approximate location (a city and country) from the IP address. We use these logs only to keep the site working and secure.
When you email us
The "Register interest" and "Talk to us" links on this site open your own email program. Nothing is sent to this website; the email goes from you to us.
Email to hello@getappoint.co.uk is delivered to a mailbox that N90 Labs Ltd, a company whose email system we share, operates for us, and our reply may come from an n90.ai address. N90 Labs Ltd acts on our instructions and is listed under "Who we share your personal data with".
When you email or write to us, we receive whatever you choose to include. That is usually your name, your email address, the organisation you work for and your role, and your message. You do not have to give us any personal data, but if you do not, we cannot reply to you.
When we correspond with you in the course of our business
If you talk to us about becoming a customer, invest in or advise us, supply us, or act for an organisation that does, we hold the personal data that the relationship needs: your name, your work contact details, your role and organisation, and the record of our conversations, meetings and correspondence with you.
Personal data from other sources
Most of what we hold comes from you. Sometimes we receive it from someone else: a colleague who introduces you or copies you into an email, or the organisation you work for. We may also look at public sources, such as the Companies House register or your organisation's website, to understand who we are talking to and to check the details we have been given.
Personal data we do not want
We do not ask for, and do not want, information about your health, ethnic origin, political opinions, religion, trade union membership, sexual orientation or criminal record. Please do not send it to us. If you do, we will delete it unless the law requires us to keep it.
This website and our services are for organisations. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, tell us and we will delete it.
Why we use your personal data, and our lawful basis
Data protection law lets us use your personal data only where we have a proper reason for doing so. The reasons we rely on are set out below.
| What we use your personal data for | Our lawful basis |
|---|---|
| Serving this website and keeping it working and secure, which is what the request logs are for | Our legitimate interest in operating and protecting our website (UK GDPR Article 6(1)(f)) |
| Replying to your email or message, and dealing with any question that follows from it | Our legitimate interest in answering the people who contact us (Article 6(1)(f)) |
| Talking with you about becoming a customer: arranging a conversation, answering your questions and agreeing terms | Where you would be a party to the contract yourself, taking steps at your request before entering into a contract (Article 6(1)(b)). Where you act for an organisation, our legitimate interest in winning and serving customers (Article 6(1)(f)) |
| Sending updates about Appoint to people who have asked for them | Your consent (Article 6(1)(a)). You can withdraw it at any time, see "Updates about Appoint" below |
| Corresponding with investors, advisers and suppliers, and managing those relationships | Our legitimate interest in running our business (Article 6(1)(f)), and, where you are personally a party to a contract with us, performing that contract (Article 6(1)(b)) |
| Keeping records that the law requires us to keep, and complying with lawful requests from regulators, courts or law enforcement | To comply with our legal obligations (Article 6(1)(c)) |
| Establishing, exercising or defending legal claims | Our legitimate interest in protecting our business and our rights (Article 6(1)(f)), or to comply with a legal obligation (Article 6(1)(c)) |
| Sharing information with our professional advisers, and with a buyer, investor or lender and their advisers, if our business is sold, merged, reorganised or financed | Our legitimate interest in running, and if we choose, selling or financing our business (Article 6(1)(f)). Information is anonymised where that is possible and shared only where necessary |
A legitimate interest is a business reason for using your personal data that is not overridden by your own interests, rights and freedoms. Where we rely on one, we have weighed it against your interests. You can ask us about that assessment, and you can object to any use of your personal data that rests on a legitimate interest, using the details under "How to contact us".
Updates about Appoint
We do not send marketing to people who have not asked for it, and we do not buy, rent or sell lists of contacts.
If you register interest, we take that as a request to hear from us about Appoint, and we will email you when we have something to tell you. That is the only thing we send unasked. To stop, reply to any email we send you or write to hello@getappoint.co.uk, and we will stop. We keep a note of your request so that we do not contact you again.
If you ask us about becoming a customer, we use your details to arrange and follow up that conversation. You can tell us to stop at any time.
We do not share personal data with other organisations for their marketing.
Who we share your personal data with
We use a small number of providers to run our website and our email. They process personal data on our behalf and are not permitted to use it for their own purposes, except as their own legal obligations require.
| Provider | What it does for us | Where it is based |
|---|---|---|
| Vercel Inc. | Hosts this website. Its servers handle requests to our pages and keep the request logs described above | United States |
| Provides the email service (Google Workspace) on which the mailbox that receives our email runs. Every email you send us, and our replies, are held there | Google's contracting entity for Google Workspace customers in the United Kingdom is Google Cloud EMEA Limited, Dublin, Ireland. Google may process data in the United States and elsewhere | |
| N90 Labs Ltd | Holds the Google Workspace account on which our email runs and operates, on our behalf and on our instructions, the mailbox that email to hello@getappoint.co.uk is delivered to. Our replies may be sent from an n90.ai address | United Kingdom (company number 17006232, registered in England and Wales) |
Vercel also keeps operational logs and metadata about requests to its network for its own purposes, as a controller. Vercel's privacy notice, at vercel.com/legal/privacy-notice, describes that processing.
Beyond the providers of our IT systems, we share personal data only where we need to, with:
- our professional advisers, such as lawyers, accountants and auditors, who are bound by confidentiality;
- regulators, courts, tribunals and law enforcement, where the law requires it or allows it;
- a buyer, investor or lender and their advisers, if our business is sold, merged, reorganised or financed, as described in the table above.
We do not sell personal data.
Transfers out of the United Kingdom
This website is hosted in the United States, so the request logs are processed there. Our email is provided by Google, which may process it in the United States and elsewhere.
Where personal data leaves the United Kingdom, it goes either to a country or organisation that the UK has approved for transfers, or under a safeguard that the UK GDPR recognises:
- transfers to organisations in the United States that are certified under the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge) are approved by regulations made under the Data Protection Act 2018. Vercel and Google each state that they comply with it;
- transfers to the countries of the European Economic Area are to countries the UK has approved;
- for any other transfer, we rely on the ICO's International Data Transfer Addendum to the EU Standard Contractual Clauses, or the ICO's International Data Transfer Agreement, as appropriate safeguards under Article 46 of the UK GDPR.
You can ask us which approval or safeguard covers a particular transfer, and for a copy of any safeguard, using the details under "How to contact us".
How long we keep your personal data
We keep personal data only for as long as we need it for the purpose we collected it for. We decide how long that is by asking whether the conversation or relationship it belongs to is still live, whether we need it to show what was agreed or done, and whether the law requires us to keep it.
- Request logs are held by Vercel for no more than 30 days. We do not copy them anywhere else.
- Enquiries and correspondence are kept while we are in contact with you and for as long as we need them to deal with anything that follows. If a business relationship follows, we keep the correspondence that forms part of our record of it for the life of the relationship and for as long afterwards as we need it to show what was agreed and done.
- Your request for updates about Appoint is kept until you tell us to stop. After that we keep only your email address and the date of your request, so that we do not contact you again.
- Business records that the law requires us to keep, such as accounting records, are kept for the period the law sets.
Where a longer period is needed to establish, exercise or defend a legal claim, we keep the data for that period.
Keeping your personal data secure
We take technical and organisational measures appropriate to the personal data we hold, to protect it from being lost, altered, disclosed or accessed without authority, and we limit access to the people who need it. Our providers publish their own security measures.
Where the law requires it, we will tell you, and the ICO, about a personal data breach that affects you.
Automated decisions
We do not make decisions about you that have a legal or similarly significant effect for you based solely on automated processing, in the sense of Articles 22A and 22B of the UK GDPR.
Your rights
You have the following rights over your personal data. You can usually exercise them free of charge.
| Right | What it means |
|---|---|
| Access (Article 15) | To be told whether we hold personal data about you and to be given a copy of it, with information about how we use it |
| Rectification (Article 16) | To have inaccurate personal data corrected, and incomplete personal data completed |
| Erasure (Article 17) | To have your personal data deleted, in certain situations: for example, where we no longer need it, or where you withdraw consent and we have no other basis for keeping it |
| Restriction (Article 18) | To have us limit what we do with your personal data in certain situations: for example, while we check its accuracy after you have questioned it |
| Data portability (Article 20) | To receive the personal data you gave us, where we use it with your consent or to perform a contract, in a structured, commonly used, machine-readable format, and to have it sent to another organisation where that is technically feasible |
| Objection (Article 21) | To object at any time to our use of your personal data for direct marketing, and we will stop. To object, on grounds relating to your particular situation, to any use that rests on a legitimate interest, and we will stop unless we can show compelling grounds that override your interests, or the use is needed for a legal claim |
| Withdrawing consent (Article 7(3)) | Where we rely on your consent, to withdraw it at any time. Withdrawing consent does not affect what we did lawfully before you withdrew it |
To exercise a right, email hello@getappoint.co.uk or write to us at our registered office. Tell us which right you want to exercise and what personal data it concerns. If we have reasonable doubts about who you are, we may ask you for information to confirm your identity before we act (Article 12(6)).
We will respond within one month of receiving your request, or of receiving any information we need to identify you (Article 12A). If a request is complex, or you have made several, we may extend that by up to two further months, and we will tell you within the first month if we need to, and why. We do not charge for a request unless it is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to act on it (Article 12(5)).
The ICO publishes guidance on your rights at ico.org.uk. If you live in a country or state whose law gives you further rights, tell us and we will honour them where they apply to us.
How to complain
If you are unhappy with how we have used your personal data, please tell us first, by email to hello@getappoint.co.uk or by post to our registered office. We will acknowledge your complaint within 30 days of receiving it, look into it, keep you informed and tell you the outcome without undue delay. This is what section 164A of the Data Protection Act 2018 requires of us, and we would rather resolve a concern with you than have it go unanswered.
You also have the right to complain to the ICO, the UK's data protection regulator, under section 165 of the Data Protection Act 2018:
- Online: ico.org.uk/make-a-complaint
- Telephone: 0303 123 1113
- Post: Information Commission's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Changes to this notice
When we change this notice, we will publish the new version on this page and update the date at the top. Where a change is significant and we have a way to reach you, we will also tell you directly.
How to contact us
Appoint Group Limited
124-128 City Road
London EC1V 2NX
Email: hello@getappoint.co.uk
Write to us for any question about this notice or the personal data we hold about you, to exercise a right, or to make a complaint.
Appoint Group Limited is registered in England and Wales, company number 16912796. ICO registration reference ZC099445.