What we do with your details.

Who we are

Cobalt Automation Services, run by Leon Smith. This website is cobaltautomationservices.com. For data protection purposes we are the controller of the information described below, which means we are the ones responsible for it.

The quickest way to reach us about anything on this page is by email, at [email protected]. Ask for anything described below and we will do it.

What we collect, and when

If you book an audit

The booking form asks for your name, your email address and your phone number, plus anything you choose to type in the notes. The phone number is required. It is there so we can reach you if something goes wrong with the call at either end, which email is not much use for.

All of it is used for one thing: holding the appointment, sending you the joining link, and talking to you about the call you booked. The tick box on that form covers the appointment and nothing else. There is no second box doing something different, and booking a call does not put you on a list. That is the entire arrangement.

If you use the assistant on the home page

When you send a message, three things go to the Cobalt automation service, which runs on n8n: what you typed, the address of the page you are on, and up to the last twelve messages of the conversation, so that the reply makes sense in context. Your IP address reaches that server as it does with any website, and is used briefly to stop one person sending hundreds of messages in an hour.

The relevant conversation content is then sent to Anthropic's Claude API, which writes the reply. Anthropic says that inputs and outputs sent through its API are normally deleted within thirty days, subject to exceptions it sets out itself, which include complying with the law and investigating misuse: how long Anthropic stores data.

Anthropic also says that by default it does not use inputs or outputs from its commercial products, its API included, to train its models, and that the exception is material sent to it deliberately as feedback, which we do not send: is my data used for model training.

The automation service keeps a record of each run, which can include the conversation, for up to fourteen days, after which it is deleted automatically.

Chats are not added to GoHighLevel, to a contact record or to a mailing list automatically. If you type contact details into the chat they become part of that conversation, and they do not subscribe you to marketing. If you ask us to get in touch, we may use those details to reply to you.

We use the conversation to answer your question. We do not use it to build a profile of you and we do not use it for advertising.

If you take the check

The arithmetic runs in your browser. Your answers are not sent to us, not stored, and not seen by anyone, and if you close the tab they are gone. We do not know you took it.

If you just read the site

The site is hosted on GoHighLevel, which gives each visit an identifier and records how you arrived, and sits behind Cloudflare, which measures page speed and screens automated traffic. Both set what they need before you choose anything, and neither is something we can switch off. We do not run advertising pixels, visitor statistics or any tracker of our own. The full list, item by item, is on the cookies page.

What we never do

• Sell your details, rent them, or pass them to anybody for their own marketing.
• Add you to a mailing list because you booked a call. Booking a call books a call.
• Start an automated email sequence off the back of a form.
• Bury a second permission inside the one you had to tick to make the booking work.
• Use anything you tell us on a call as an example, a case study or a testimonial without asking you first, in writing, and taking no for an answer.

Who else touches it

We use a small number of suppliers to actually run the thing. They process data on our instructions and are not allowed to use it for themselves.

GoHighLevelWebsite hosting, the booking calendar, and where your contact record lives	Live
GoogleCalendar and Meet, for the audit call itself	Live
MetaWhatsApp, for client systems we build. Not used by this website	Client builds only
n8nThe automation service that runs the website assistant. Keeps a record of each run for up to fourteen days	Live
AnthropicThe Claude API that writes the website assistant's replies	Live

Some of these are outside the UK and the EEA. Where that is the case, transfers rely on the standard contractual arrangements those suppliers publish.

How long we keep it

If you book a call and we end up working together, we keep your details for as long as we are working together and for six years afterwards, because that is how long tax and contract records generally have to be kept.

If you book a call and nothing comes of it, we keep the record for two years and then delete it. If you would rather we deleted it sooner, say so and we will, and you do not have to give a reason.

What you can ask for

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it, or ask us to send it to somebody else. Ask, and we will do it. There is no charge and no form to fill in.

If we get it wrong and you want to complain to a regulator rather than to us, in the UK that is the Information Commissioner's Office at ico.org.uk, and in Spain it is the Agencia Española de Protección de Datos at aepd.es. We would rather you came to us first, but that is your call and not ours.

Cookies

Checked on 26 August 2026 in a fresh browser: the site sets a short-lived Cloudflare security cookie, a GoHighLevel visit identifier with four matching browser storage entries, and, once you choose, one cookie of ours that remembers your choice for 180 days. The booking calendar sets its own copy of the platform identifier on that page only. Nothing optional is running, no advertising cookies, and nothing that follows you to other sites. If we ever add visitor statistics they stay off until you say yes, and you can change your mind at any time from Cookie settings in the footer. What each item is and how long it lasts is on the cookies page. If you block cookies in your browser the site still works.

Changes

If this page changes in a way that matters, the date below changes with it. We are not going to pretend to email you about a privacy policy update.

Last updated: 26 August 2026.