Privacy policy.
In plain English: what we collect, why, who it touches, and the control you have over it. No dark patterns, no buried clauses.
Who we are
sizrok is a trading name of Hamza Jamal, a sole trader based in Greater Manchester. Hamza Jamal ("we", "us") is the data controller for the personal data described below, and operates under UK GDPR and the Data Protection Act 2018. You can reach us by email at contact@sizrok.com, or by post at 137 Belfield, Rochdale, OL16 2XL. If you have a question about your data, or want to exercise any of the rights set out below, email us and a person, not a bot, will answer.
What we collect, and why
We only collect what we need to do the thing you asked us to do. We do not buy data, and we do not sell it.
| When you… | We collect | Why |
|---|---|---|
| Run the AI Audit | Your industry, role, weekly hours, team size, and the free text description of the task you want off your plate. Your email if you ask for the blueprint. | To generate your automation blueprint and, if you request it, email you a copy. |
| Subscribe to field notes | Your email address. | To send the monthly newsletter. Unsubscribe any time from a link in every email. |
| Use the contact form | Your email and whatever you write in the message. | To reply and, if it goes anywhere, scope the work. |
| Apply via careers | Your name, email, a link or uploaded CV, and any note you add. | To consider your application. |
The legal basis
- Consent for the newsletter. You opt in, and you can opt out at any time.
- Legitimate interest for the audit and the contact form, so we can respond to an enquiry you started and run our studio.
- Steps prior to a contract for careers applications and scoping work you have asked us to quote.
The AI Audit
The audit takes the answers you give and sends them to our AI provider to produce a written blueprint. The blueprint is informational. It is a suggestion of where automation might help, not an automated decision that has a legal or similarly significant effect on you, and a person is always in the loop before anything is built. You can run the audit without giving us your email. We only hold an email address if you ask us to send you the blueprint.
Who processes your data
We keep our supplier list short and use established providers who publish their own data protection terms. The companies that may process your data on our behalf are:
- Anthropic powers the AI Audit. Your audit answers are sent to Anthropic's API to generate the blueprint. They do not train their models on this data under their commercial terms.
- Resend sends transactional and newsletter email.
- Cloudflare hosts the secure function that talks to the AI and, where used, stores files you upload.
- Our workflow and CRM tooling (for example n8n) routes enquiries and applications to the right inbox.
Each of these acts as a data processor under a data processing agreement. Some are based in the United States. Where data leaves the UK it is protected by the UK International Data Transfer Agreement, Standard Contractual Clauses, or an equivalent safeguard.
Files you upload
If you send a CV through the careers form, the file is stored privately. It is not published anywhere public, and only the people considering your application can open it. You can ask us to delete it at any time.
How long we keep it
- Audit submissions kept while we work with you, then deleted within 12 months of last contact.
- Newsletter until you unsubscribe.
- Contact enquiries up to 24 months, so we have context if you come back.
- Careers up to 12 months, unless you ask us to keep your details longer or remove them sooner.
Your rights
Under UK GDPR you can ask us to:
- Show you the data we hold about you.
- Correct anything that is wrong.
- Delete it (the "right to be forgotten").
- Stop or limit how we use it, including withdrawing consent.
- Hand it to you, or to another provider, in a portable format.
Email contact@sizrok.com and we will action it within one month. If you think we have got something wrong, you can also complain to the Information Commissioner's Office, the UK's data regulator.
Cookies and analytics
We keep tracking to a minimum. The site uses only the cookies needed to make it work. If we add analytics, it will be the privacy respecting kind that does not set advertising cookies or build a profile of you across the web. If that ever changes, this policy, and a consent banner, will change with it.
Changes to this policy
If we update it, we will change the date at the top. Material changes that affect how we use your data will be flagged more clearly. This version is dated 11 June 2026.