Who we are
sonti.io is run by Sonti Limited. We decide how and why the personal data described here is used, which makes us its controller under UK data protection law.
- Company
- Sonti Limited, registered in England and Wales
- Company number
- 16322412
- Registered office
- 5 Brayford Square, London E1 0SG
- Privacy questions
- hello@sonti.io
The short version
- We collect what you give us through the enquiry form, our lead form on TikTok, the booking calendar or email, plus the technical details every website receives.
- TikTok’s pixel only loads on this site if you allow it, and you can change your mind at any time in cookie settings.
- We don’t sell personal data, and we don’t make automated decisions about you.
- You can ask to see, correct or delete your data by emailing hello@sonti.io.
What we collect and why
Each activity below lists the data involved, what we use it for, and the lawful basis we rely on.
When you send the enquiry form
- What we collect
- Your name, agency, work email, the type of request you pick, and whatever you write under “The ask, in their words”, which may include details of your client’s request.
- What we use it for
- Reading and replying to your request, scoping the work, and keeping a record of our conversation in our customer relationship system.
- Lawful basis
- Our legitimate interest in answering business enquiries and winning new work. Where you’re asking about working with us, it is also a step you’ve asked us to take before a contract.
Please don’t put sensitive personal data, such as health details, in the brief. If your client’s request involves personal data, describe it rather than copying it in.
When you fill in our lead form on TikTok
- What we collect
- Your name and email address, depending on the form your phone number or company name, and your answers to its questions, such as which best describes you and how many clients you bill. TikTok may fill in some details from your TikTok account before you send the form.
- What we use it for
- Contacting you about your enquiry and keeping a record of our conversation.
- Lawful basis
- Our legitimate interest in answering business enquiries and winning new work, and steps you’ve asked us to take before a contract.
The form runs inside TikTok, so TikTok also receives what you send and handles it as described in TikTok’s privacy policy. This is separate from TikTok’s pixel on our website, which only loads if you allow it.
When you book a call
- What we collect
- The details the booking calendar asks for, such as your name, email address and chosen time, and anything you add to the booking.
- What we use it for
- Arranging the call and sending you its details.
- Lawful basis
- Our legitimate interest in answering business enquiries, and steps you’ve asked us to take before a contract.
The calendar only loads when you choose “Book a call”. It comes from our booking system at link.knotie.ai, which runs on HighLevel. The calendar page also downloads a script from Meta; when we checked on 12 September 2026, that script sent no tracking data and set no cookies.
When you email us
- What we collect
- Your email address, your name and whatever you send us.
- What we use it for
- Replying to you and keeping a record of our correspondence.
- Lawful basis
- Our legitimate interest in running the business and answering the people who contact us.
When your agency works with us
- What we collect
- Names, job titles and contact details of the people we work with, plus contracts, invoices and project correspondence.
- What we use it for
- Delivering the work, billing, and meeting our legal and accounting obligations.
- Lawful basis
- Performing our contract with your agency, complying with the law, and our legitimate interest in managing the relationship.
Personal data inside the systems we build for your clients is covered by the data processing agreement in your contract, not by this policy.
When you visit the site
- What we collect
- Your IP address, browser and device details, and the pages you request and when.
- What we use it for
- Delivering the site through our host, Vercel, keeping it secure and fixing faults. Your browser also fetches our fonts from Google Fonts, so Google receives your IP address; Google Fonts doesn’t set cookies.
- Lawful basis
- Our legitimate interest in running a secure website that works.
If you allow TikTok’s pixel
- What we collect
- That you visited, the pages you viewed, whether you opened the booking calendar or sent an enquiry, the TikTok ad you clicked to get here (if any), and the identifiers stored in the cookies listed in our cookie policy.
- What we use it for
- Measuring which of our TikTok ads bring agencies to the site, and improving our advertising.
- Lawful basis
- Your consent. You can withdraw it at any time in cookie settings. That stops any further collection but doesn’t undo what was already sent.
If you send the enquiry form while the pixel is allowed, our server also reports the enquiry to TikTok. It sends your email address and our internal contact reference in hashed form (SHA-256, which TikTok can match against its own records), your IP address, browser details, the page address, and TikTok’s click and browser identifiers. It never sends your name, agency or brief. TikTok also uses this data for its own purposes, as described in TikTok’s privacy policy.
Who we share it with
We share personal data only with the service providers who help us run the business, and only what each one needs.
| Who | What they do for us | Where they process data |
|---|---|---|
| Vercel Inc. | Hosts the website and runs the code that receives the enquiry form. | United States and other countries |
| HighLevel, Inc. | Runs our customer relationship system, where enquiries are stored, and our booking calendar. | United States |
| Cloudflare, Inc. | Protects the booking calendar from bots. | Worldwide |
| IONOS | Hosts our email. | Europe |
| Serves the website’s fonts, and files used by the booking calendar. | United States and other countries | |
| Meta Platforms | Supplies a script that the booking calendar downloads. | United States |
| TikTok | Runs our lead form on TikTok, and measures our advertising on this site if you allow its pixel. | Countries where TikTok operates, including outside the UK |
Some of our team work in India. If they need to see enquiry or client details to scope or deliver work, they do so under confidentiality agreements, with access limited to their role.
We may also share data with professional advisers such as accountants and lawyers, with authorities where the law requires it, and with a buyer if the business is ever sold. We never sell personal data.
Transfers outside the UK
Some of the providers above, and our team in India, handle data outside the UK. When that happens we rely on UK adequacy regulations, such as the UK Extension to the EU–US Data Privacy Framework for certified US companies, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Email us if you’d like details of the safeguard that applies.
How long we keep it
- Enquiries, TikTok form replies and bookings that don’t lead to work: up to 2 years after we last spoke.
- Client contacts, contracts and invoices: 6 years after our work together ends, to meet accounting and tax rules and in case of legal claims.
- Emails: as long as the enquiry or client record they belong to.
- Hosting logs: for the short period Vercel keeps them.
- TikTok cookies: up to 90 days in your browser, as listed in the cookie policy. TikTok keeps what it receives under its own policy.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you
- correct data that’s wrong or incomplete
- delete your data
- restrict how we use it
- stop using it where we rely on our legitimate interests, or for direct marketing
- send the data you gave us to you, or to another organisation, in a portable format
- stop using it where we rely on your consent, by withdrawing that consent
Email hello@sonti.io. We’ll respond within one month, and we may ask you to confirm who you are first. Some rights have exceptions; if one applies, we’ll explain it.
If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d be grateful for the chance to put things right first.
Keeping it safe
The site runs over HTTPS. The keys that connect our form to our customer relationship system and to TikTok stay on our server and never reach your browser. Access to enquiry and client data is limited to the people who need it, and we choose providers that protect data properly. No system is completely secure; if a breach puts your rights at risk, we’ll tell you and the ICO as the law requires.
Children
Our services are for businesses. The site isn’t aimed at children, and we don’t knowingly collect data from anyone under 18.
Changes to this policy
We’ll post any changes on this page and update the date at the top. If we make a significant change, we’ll make it clear on the site.