Privacy Policy

What we collect, and why

1. If you use the contact form

We collect your name, email address, business name, website (if you provide one), and your message, along with the submission time, your IP address, and browser user-agent.

We use this to respond to your enquiry. That's the only purpose. Our legal basis is legitimate interest (following up on a request you initiated) and, where a working relationship follows, taking steps to enter into a contract with you. Submissions are stored in Cloudflare KV, a database service provided by our hosting provider, Cloudflare. We don't currently run an automatic deletion schedule for this data; we keep it for as long as it's relevant to the enquiry or relationship and delete it on request (see "Your rights" below).

2. Spam protection

The contact form is protected by Cloudflare Turnstile, a challenge that verifies submissions come from a real person rather than automated spam. Turnstile processes technical signals about your device and browser to make that determination. It does not use tracking cookies and isn't used for advertising.

3. Site analytics

We use Cloudflare Web Analytics to understand overall traffic: page views, referring sites, approximate location (country-level), device type, and page-load performance. This is cookieless: it doesn't set any cookies, doesn't use persistent identifiers, and doesn't track you individually or across other websites. We can't identify who you are from this data.

We also use PostHog for deeper product analytics: page views and navigation, on-page click/scroll heatmaps, page-load performance, and a record of whether the contact form was submitted successfully (not its content — your name, email, and message stay in Cloudflare KV as described above, and are never sent to PostHog). Unlike Cloudflare's analytics above, PostHog assigns you a persistent identifier so it can recognize repeat visits, and uses local storage and/or a cookie to remember it. Session recording (a replay of your on-page actions) is currently switched off. If that changes, this section will be updated first, before it goes live, not after. Our legal basis for both analytics tools is legitimate interest in understanding how the site is used so we can improve it.

Cookies

This site does not set any cookies of its own, and Turnstile does not rely on cookies to function. PostHog, described above, does use a persistent identifier stored via local storage and/or a cookie so it can recognize repeat visits.

Who we share data with

Cloudflare provides our hosting, the database that stores contact submissions, spam protection, and Cloudflare Web Analytics. PostHog, described above, receives the usage data it collects. We don't sell data, share it with advertisers, or pass it to any other third party. Both may process data outside the UK; each provides contractual safeguards for these transfers.

Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to ask what personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to its processing, and to receive a copy in a portable format. To exercise any of these, get in touch through the contact form. We don't yet have a dedicated privacy inbox separate from general enquiries. If that changes, this page will be updated with a direct contact.

If you're unhappy with how we've handled your data, you can complain to the UK's supervisory authority, the Information Commissioner's Office (ICO).

Children

This site isn't directed at children, and we don't knowingly collect data from them.

Changes to this policy

If what we collect or why changes, we'll update this page and the date at the top.