Security & GDPR

We build practical automations with clear data handling. This page explains how we handle credentials, logs, and personal data.

Principles

• Data minimisation. Process only what the workflow needs.
• Least-privilege access. Separate roles, revoke when finished.
• Transparency. You own workflows, data, and credentials.
• Reproducibility. Loom, diagram, and a checklist for each build.

Credentials

• Stored in n8n Credentials, not plain nodes.
• Shared via secure channels (never email). Revoked at handover.
• Separate test and production accounts where possible.

Logs and monitoring

Processors we commonly use

• n8n (Cloud or your VPS)
• Google (Workspace, Sheets) or Microsoft 365
• Calendly
• Slack or Microsoft Teams
• HubSpot or Pipedrive
• Stripe (deposits)

We can sign a DPA and list specific processors in your project notes.

Legal bases (UK GDPR)

• Contract — to deliver the services you request.
• Legitimate interests — to improve reliability and security.
• Consent — where required (e.g. SMS messaging).

Data subject rights

• Access, rectification, erasure, restriction, portability, and objection.
• Contact: hello@technophobia.uk

Security notes

• HTTPS, strong auth, and role-based access on tools.
• Backups of workflows and credentials (encrypted) on your stack.
• Documented rollback steps before go-live.

Questions

Email hello@technophobia.uk and we’ll respond within one business day.