Privacy Policy

Last updated: 10 November 2026

This Privacy Policy explains how we collect, use and look after personal data when you use https://saschacutura.com (the "Website"), the personal speaker site of Sascha Cutura, or when you contact us or join a waitlist through the Website.

The Website is operated by 10X BUSINESS AUTOMATION LTD. We handle personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who we are

This Website is operated by 10X BUSINESS AUTOMATION LTD. 10X BUSINESS AUTOMATION LTD is a company registered in England and Wales with company number 15750761, VAT number GB528 2593 71. Its registered office is Office 253 Unit 5, 399-405 Oxford Street, Mayfair, London, England, W1C 2BU.

10X BUSINESS AUTOMATION LTD is the data controller for personal data collected through this Website and through the enquiry, waitlist and contact channels described below.

10X BUSINESS AUTOMATION LTD is registered with the Information Commissioner's Office (ICO) as a data controller.

2. How to contact us

For questions about this policy or your personal data:

• Email: hello@saschacutura.com
• Post: 10X BUSINESS AUTOMATION LTD, Office 253 Unit 5, 399-405 Oxford Street, Mayfair, London, England, W1C 2BU

3. Personal data we collect

Information you provide

• Email and waitlist forms: name, email address, and any message or other details you choose to include.
• Email or other correspondence: the contact details and information you include in your message.

Please do not send us special category data (for example, health information) or anyone else's personal data unless we have asked for it and it is necessary.

Information collected when you use the Website

• Technical data such as IP address, browser type, device type, pages viewed, dates and times of visits, and referral source.
• Cookie and similar identifiers, as described in section 6 and in our Cookie Policy.
• Form metadata, such as the time a form is submitted.

We do not knowingly collect personal data from children. The Website is aimed at professional contacts and people with an interest in speaking, events and related updates.

4. How we collect personal data

We collect personal data when you complete an email or waitlist form, email or write to us, or allow optional cookies or similar technologies after you make a choice on our cookie banner.

We may also receive information about you from a colleague who refers you. We do not buy marketing lists.

5. Purposes and lawful bases

We only use personal data where we have a lawful basis under UK GDPR.

• Responding to an enquiry or other message: steps at your request before entering a contract (Article 6(1)(b)), and our legitimate interests in answering enquiries (Article 6(1)(f)).
• Managing a waitlist or sending updates you have asked to receive: consent (Article 6(1)(a)), and PECR consent rules for electronic mail to individual subscribers.
• Operating, securing and maintaining the Website, including strictly necessary cookies: legitimate interests (Article 6(1)(f)), and PECR's exception for cookies that are strictly necessary.
• Analytics and similar measurement, including Google Analytics 4 loaded through Google Tag Manager: consent (Article 6(1)(a)), and PECR consent for non-essential cookies and similar technologies.
• Keeping records required by law, including tax and accounting records where they apply: legal obligation (Article 6(1)(c)).
• Establishing, exercising or defending legal claims: legitimate interests (Article 6(1)(f)).

Where we rely on legitimate interests, we have considered your rights and what you would reasonably expect. You can object to that processing. Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before you withdrew consent.

We do not use your data for automated decisions that produce legal or similarly significant effects.

6. Cookies and similar technologies

A cookie is a small file placed on your device. We also use similar technologies, such as pixels, tags and scripts, including through Google Tag Manager.

Strictly necessary cookies are used to make the Website work, to keep a form working, or to store your cookie choice. They may be set without consent.

Google Analytics 4, loaded through Google Tag Manager, is used only after you give consent through our cookie banner. If you refuse, or if you do not make a choice, it is not used.

You can withdraw or change your consent at any time through the cookie banner or the cookie settings link on the Website, or by adjusting your browser settings. Blocking all cookies may affect parts of the Website.

Our Cookie Policy, published on this Website, sets out the cookies we use, their purpose and duration, and how you can manage them.

7. Who we share personal data with

We share personal data with service providers who process it on our instructions, and only where this is needed to run the Website or respond to you:

• Leadpages, which hosts the Website and the email and waitlist forms.
• Google, including Google Analytics and Google Tag Manager, where you have consented to that analytics use, and Google services if used for email or documents.
• Professional advisers, such as accountants or lawyers, where needed.
• A purchaser or successor, if we reorganise or transfer the activities connected with this Website.

The Website also includes links to other sites and services, including The Automation Guys podcast, YouTube, Spotify and a Skool community. If you follow those links, the relevant provider is responsible for its own site or service and for any personal data you give it. Those providers have their own privacy notices.

We may also disclose personal data if the law requires it, or if it is necessary to protect our rights, your safety or the safety of others. We do not sell your personal data.

8. International transfers

Some of the providers named above are based outside the United Kingdom, or may store or access data outside the United Kingdom, including in the European Economic Area and the United States.

Where a transfer is not covered by a UK adequacy regulation, we use a lawful transfer mechanism. This will usually be the UK International Data Transfer Agreement, or the UK Addendum to the EU standard contractual clauses, together with any supplementary measures that are appropriate. Where a provider participates in a UK-recognised framework, such as the UK-US data bridge for certified organisations, we may rely on that framework.

You can contact us if you would like more information about the mechanism used for a particular transfer.

9. How long we keep personal data

We keep personal data only for as long as we need it for the purposes set out in this policy, including legal, accounting or reporting requirements.

• Enquiry records, where no further relationship follows: 24 months from the last meaningful contact.
• Waitlist or updates lists: until you unsubscribe or we close the list, and for a short period afterwards so we can honour your opt-out.
• Cookie consent records: for the life of the consent, and for a period afterwards so we can show that we complied with PECR.
• Analytics data: for the period set by the relevant tool, typically no longer than 26 months for Google Analytics 4.

We may keep data for longer if we need it for a legal claim, or if the law requires us to do so. When we no longer need it, we delete it or irreversibly anonymise it.

10. Your rights

You have the following rights, in the circumstances set out in UK GDPR:

• Access: to ask for a copy of the personal data we hold about you.
• Rectification: to ask us to correct inaccurate or incomplete data.
• Erasure: to ask us to delete your data, in certain cases.
• Restriction: to ask us to limit how we use your data, in certain cases.
• Objection: to object to processing based on legitimate interests, and to object to direct marketing at any time.
• Portability: to ask for data you provided to us on the basis of consent or contract, in a structured, commonly used and machine-readable format.
• Withdraw consent: where we rely on consent, to withdraw it at any time.

To use any of these rights, contact us using the details in section 2. We may need to confirm your identity. We will respond within one month, or we will tell you if we need more time, as the law allows. These rights are not always absolute. If we cannot comply with a request, we will explain why.

11. Complaints

Please contact us first if you are unhappy with how we have used your personal data. We will try to resolve the matter.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection:

• Website: https://ico.org.uk
• Telephone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

12. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page, with a new "Last updated" date. Please check the page when you return to the Website. If a change is significant, we will take additional steps to bring it to your attention where it is reasonable to do so.