Last updated: May 2026

This Privacy Policy explains how Common (“Common”, “we”, “us” or “our”) collects, uses and protects personal information through our website and related business enquiries.

By accessing or using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

We may collect the following information when you use our website or contact us:

• your name;

• business email address;

• organisation name;

• job title or role;

• telephone number, where provided;

• enquiry type and message content;

• correspondence and commercial communications;

• basic technical information, such as IP address, browser type, device information and website usage data;

• cookie and analytics information, where applicable.

We do not intentionally collect special category personal data through this website.

2. How We Use Information

We use personal information for the following purposes:

Responding to enquiries

We use your name, email address, organisation details, enquiry type, message content and correspondence to respond to enquiries submitted through the website. Our lawful basis is legitimate interests, namely responding to business enquiries and managing commercial relationships.

Discussing partnerships, deployments and commercial opportunities

We use business contact details, organisation details and correspondence to assess and progress potential partnerships, machine deployments, supplier relationships and other commercial opportunities. Our lawful basis is legitimate interests, namely developing and managing business relationships.

Operating and improving the website

We use technical data, usage data and cookie data to operate, maintain, secure and improve the website. Our lawful basis is legitimate interests, namely maintaining website security, performance and functionality.

Following up on genuine commercial interest

Where you have contacted us or expressed interest in Common, we may use your business contact details and correspondence history to send relevant follow-up communications. Our lawful basis is legitimate interests, namely following up on genuine commercial enquiries.

Complying with legal and corporate obligations

We may use relevant business records and correspondence to comply with legal, regulatory, accounting, tax or corporate obligations. Our lawful basis will be legal obligation where the law requires the processing, or legitimate interests where the processing is necessary to manage legal, contractual or corporate risk.

Where we rely on legitimate interests, we do so only where we consider that our interests are not overridden by your rights and freedoms.

3. Cookies and Analytics

Our website may use cookies or similar technologies to operate the site, understand usage and improve performance.

Where cookies are strictly necessary, they are used to provide the website. Where we use non-essential cookies, such as analytics or marketing cookies, we will request consent where required by law. The ICO states that organisations must explain what cookies do and obtain consent unless the cookie is strictly necessary.

4. Data Sharing

We may share information with trusted service providers who assist us in operating the Service, subject to confidentiality obligations.

We may also disclose information if required by law or to protect the rights and safety of the Service and its users.

5. Data Retention

We retain personal data only for as long as necessary to provide the Service and fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

6. International Transfers

Some of our service providers may process personal information outside the United Kingdom. Where this occurs, we will take appropriate steps to ensure that personal information is protected in accordance with applicable data protection law, including by using recognised safeguards where required.

7. Your Rights

Under UK data protection law, you may have the right to:

• access your personal information;

• correct inaccurate information;

• request deletion of your information;

• restrict or object to certain processing;

• request transfer of your information;

• withdraw consent, where processing is based on consent;

• complain to the Information Commissioner’s Office.

To exercise your rights, contact us at contact@commonmachines.com.

You can also complain to the Information Commissioner’s Office at ico.org.uk if you are unhappy with how we handle your personal information. The ICO recommends that individuals raise concerns with the organisation first where possible.

8. Security

We take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse or disclosure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be published on this page with the updated date above.

10. Contact

If you have questions about this Privacy Policy or how your data is handled, please contact us.