Legal draft
Privacy
A plain-English privacy draft for DeskChase (deskchase.com). This is a working outline for review — not formal legal advice. A solicitor-reviewed notice and Data Processing Agreement (DPA) should be finalised before go-live.
Last updated: 5 November 2026 (Europe/Berlin local draft date; UK business intended). Contact placeholder below until a live address is set.
Who we are
DeskChase is a brand operated by James Mackie, offering done-for-you, AI-assisted back-office operations for businesses worldwide. When this site goes live at deskchase.com, this notice will name the legal entity, registered address, and contact email for privacy queries.
Privacy contact (placeholder): [email protected]
What this notice covers
- Visitors to this website and people who contact us
- Prospective business customers we may market to (B2B)
- How we handle personal data when we process it on a client’s behalf as a processor
Data we collect from website visitors and enquirers
If you use the contact form or email us, we typically receive:
- Name, business name, email address, and phone number (if you provide them)
- Message content and any files you attach
- Basic technical data such as IP address, browser type, and pages viewed (if analytics are later enabled — none are wired on this draft site)
Lawful bases (UK GDPR): we rely on legitimate interests to respond to enquiries and to operate a B2B marketing site, and on contract (or steps prior to contract) when you ask us to quote or deliver services. Where consent is required (for example certain PECR electronic marketing to individuals), we will obtain it.
B2B marketing and PECR
DeskChase markets primarily to organisations. Under UK PECR, some B2B email marketing may proceed without prior consent where soft-opt-in or legitimate-interest conditions are met, with a clear opt-out in every message. We will not send unsolicited marketing to consumers without a lawful basis. You can opt out of marketing at any time by replying “unsubscribe” or emailing the privacy contact above.
Client work — our role as processor
When we triage a client’s inbox, chase quotes, or handle project admin, we usually act as a processor (or sub-processor) for personal data that sits in the client’s systems. The client remains the controller. In that role we:
- Process only on documented instructions
- Limit access to what the engagement needs
- Keep drafts under human approval before anything goes out in the client’s name
- Return or delete access materials when the engagement ends, subject to legal retention needs
A formal Data Processing Agreement (DPA) will be put in place before live client processing. That DPA is listed as outstanding in the project README.
AI assistance
We use AI tools to help draft and organise work faster. We take care not to feed confidential client content into tools in ways that undermine confidentiality commitments. Human approval remains required before outward communications in a client’s name.
Sharing
We do not sell personal data. We may share data with service providers who help us run email, hosting, or productivity tools, under appropriate contracts, or where the law requires disclosure.
International transfers
DeskChase may serve clients worldwide and use tools hosted outside the UK. Where UK GDPR transfer rules apply, we will use an appropriate safeguard (such as the UK International Data Transfer Agreement / Addendum or adequacy) and record it in the live privacy notice and DPA.
Retention
Enquiry data is kept only as long as needed to respond, quote, and maintain ordinary business records (typically up to 24 months for unsuccessful leads unless a longer period is required). Client-processing retention follows the client agreement and DPA.
Your rights
Under UK GDPR you may have rights to access, rectify, erase, restrict, object, or port your personal data, and to complain to the Information Commissioner’s Office (ICO). Contact the privacy address above first so we can help promptly.
Children
Our services are aimed at businesses, not children. We do not knowingly collect children’s data.
Changes
We will update this page when the live entity details, contact email, analytics, or processing arrangements change.
Draft status. Replace placeholders (legal entity, address, [email protected]) before domain launch. Have a UK solicitor review this notice and the DPA.