This site collects nothing unless you send it.

The short version

This site collects nothing unless you send it to us. There are no analytics, no advertising pixels and no tracking cookies. If you fill in the contact form, or give us your email in the footer, that content reaches us and the one processor named below, and nobody else.

What we collect, and when

The contact form collects the first and last name, email address, phone number, organisation, postcode, budget range, timeline, how you heard about us, which services you are interested in and the message you enter, plus the time of submission. Only first name, email and message are required; everything else is optional and the form works without them.

The subscribe field in the footer collects your email address and nothing else. It exists so we can send you something when we have genuinely learned something worth writing down. Reply to any message and we will remove you, or email us and we will do it the same day.

Our hosting provider records standard server logs, including IP address and user agent, as a normal part of serving the site and defending it from abuse.

What we do not collect

• No analytics of any kind. No Google Analytics, no product analytics, no session recording
• No advertising or social media tracking pixels
• No cookies set by this site for tracking or measurement
• No automated marketing sequences, no drip campaigns and no lead scoring
• No list bought from, sold to, or shared with anyone

Who else processes it

Contact form submissions are delivered to an automation service (Make.com) which routes them to us, acting as a processor on our instruction. The site is served by our hosting provider. A full list of the subprocessors used on client engagements is sent on request, before you share anything, and named in the data processing agreement for that engagement.

How long we keep it

Enquiries are kept for as long as the conversation is live and for up to twenty-four months afterwards, so that we can pick up a thread you started last year. Ask us to delete yours sooner and we will.

Client data is a separate matter

Data belonging to a client engagement is governed by the data processing agreement signed for that engagement, not by this policy. On those engagements the default is that customer data is never used to train a model, retention is thirty days or zero on request, and the processing region is the client's choice. Where data may not leave the organisation at all, we deploy inside its own network instead. Those commitments go in the agreement, which is where a commitment belongs.

Your rights

You can ask us what we hold about you, ask for it to be corrected, ask for it to be deleted, or object to us holding it at all. Email us and we will action it and confirm in writing. You also have the right to complain to your data protection authority. In the United Kingdom that is the Information Commissioner's Office.

Changes

If this policy changes materially we will say so here and email anyone with an active engagement. We do not make quiet changes.