Privacy Policy

What we collect
When you complete our enquiry form, we collect your name, email address and anything you choose to write in the message field. We do not ask for special category data and would ask you not to include any in your message.

When you visit the site, our hosting provider automatically records technical information such as your IP address, browser type, device type, the pages you view and the site you arrived from. This is standard for any website and is used to keep the site running securely.

Cookies and similar technologies - see the Cookies section below.We do not buy personal data from third parties, and we do not use your data for automated decision-making or profiling.

Why we use it, and our lawful basis
‍
To reply to your enquiry and discuss potential work. You have asked us to get in touch, so our lawful basis is legitimate interests — responding to a request you initiated. Where an enquiry leads to an engagement, we rely on performance of a contract, or steps taken at your request before entering one.

To keep a record of enquiries and correspondence. So we have accurate business records and can pick up conversations where we left off. Our lawful basis is legitimate interests - running the business properly.

To keep the site secure and available. To prevent spam, abuse and technical faults. Our lawful basis is legitimate interests — protecting our systems.

To understand how the site is used. Analytics help us improve the site's content and structure. Our lawful basis here is your consent, given through the cookie banner.

We will not add you to a marketing mailing list from a website enquiry unless you ask us to. If we ever do send marketing, every message will include an unsubscribe link.

Cookies

Cookies are small files placed on your device by a website. This site uses two kinds:

Strictly necessary cookies. Set by our website platform (Webflow) to deliver pages, remember form state and protect against spam and abuse. The site does not work properly without them, so they are set without consent — as permitted under the Privacy and Electronic Communications Regulations (PECR).

Analytics cookies. Used to measure how visitors find and use the site — which pages are viewed, how long people stay, and roughly where in the world they are. This data is aggregated and we do not use it to identify you personally. These cookies are only set if you accept them.

You can change or withdraw your cookie choices at any time through the cookie banner or by clearing cookies in your browser settings. Most browsers also let you block cookies entirely - see aboutcookies.org for guidance - though blocking necessary cookies may stop parts of the site working.

Who we share it with

We do not sell your personal data, and we do not share it for anyone else's marketing.

We do use trusted service providers who process data on our behalf, under contract and only on our instructions:

Webflow - website hosting and form delivery
HubSpot - enquiry records and meeting scheduling
Google Workspace - email
Google Analytics - website analytics (only with your consent)

We may also disclose data where we are required to by law, or where necessary to establish, exercise or defend legal claims.

International transfers
‍
Some of our providers are based outside the UK, primarily in the United States. Where personal data is transferred outside the UK, we rely on the UK's adequacy regulations, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, so that your data receives an equivalent level of protection.

How long we keep it

Enquiries that don't lead to work: up to 24 months from your last contact with us, then deleted.
Client records: for the duration of the engagement and 6 years afterwards, to meet legal, tax and accounting obligations.
Analytics data: retained in aggregated form for up to 26 months.
Server logs: retained by our hosting provider for a short period for security purposes.

Security

We use reputable providers with appropriate technical and organisational safeguards, including encryption in transit (HTTPS), access controls and multi-factor authentication on our accounts. No system can be guaranteed completely secure, but we take the protection of your data seriously and review our arrangements regularly.

Your rights

Under UK data protection law you have the right to:
Access - request a copy of the personal data we hold about you
Rectification - have inaccurate or incomplete data corrected
Erasure - ask us to delete your data, where there is no overriding reason to keep it
Restriction - ask us to pause processing while a concern is resolved
Object - object to processing based on legitimate interests, and to direct marketing at any time
Portability - receive certain data in a portable format
Withdraw consent - where we rely on consent, withdraw it at any time (this does not affect processing already carried out)

To exercise any of these, contact us through the website. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office:

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Helpline: 0303 123 1113 ico.org.uk

Children
‍
This site is aimed at businesses and is not intended for children. We do not knowingly collect data from anyone under 16.

Links to other sites

Our site links to other websites, including LinkedIn and our HubSpot booking page. We are not responsible for their privacy practices, and we encourage you to read their policies before sharing your data with them.

Changes to this policy

We may update this policy from time to time. The current version will always be on this page.