Autonomy Ltd Privacy Policy
Who we are
Autonomy Ltd ("Autonomy", "we") is a company registered in England and Wales. Contact: hello@mehran.co.uk.
Our role
We provide automation software that helps online sellers (such as TikTok Shop sellers) fulfil their orders. For buyer data, the seller is the controller and we are the processor. For our own website visitors, clients and prospects, we are the controller.
Data we collect
- Seller/client data: business name, contact details, account and integration credentials (stored encrypted).
- Buyer data received from a seller's shop: name, delivery address, phone/email where provided, order items and tracking, used only to fulfil that seller's orders.
- Website data: contact form messages, basic technical logs.
How we use it
To provide and secure the service, book couriers, print labels, sync tracking, support clients, and meet legal obligations. We never sell personal data, use buyer data for marketing, or use it to train AI models.
Legal basis
Contract (service delivery), legitimate interests (security, service improvement), and legal obligation. For buyer data we act on the seller's instructions.
Sharing
Only with the services needed to deliver the work: cloud hosting, database, couriers, TikTok Shop (via its API), and our AI model provider, under data processing agreements. We disclose data to authorities only when legally required.
International transfers
Primary storage is in the UK/EU. Where data is processed elsewhere, we use approved safeguards (UK IDTA/Addendum or adequacy).
Retention
Buyer data is deleted no later than 90 days after order completion and within 30 days of a contract ending. Other data is kept only as long as needed.
Security
Encryption in transit and at rest, access controls, MFA, and monitoring. We notify affected sellers within 24 hours of a confirmed breach.
Data requests
Sellers (and TikTok) can ask us to delete or correct data at hello@mehran.co.uk or https://mehran.co.uk/autonomy/data-request. We acknowledge within 2 working days and complete within 7 days. Privacy contact: the Director of Autonomy Ltd.
Your rights
You can ask for access, correction, deletion, restriction, portability or to object. For buyer data, contact the seller or us and we will help the seller respond. You can complain to the ICO (ico.org.uk).
Changes
We update this page when practices change.