Privacy & Cookie Policy

Information you give us directly, through the contact form on this site:

• Your name and business name
• Your email address
• Your website (optional)
• The message you send us, plus which option and contact method you select

Information collected automatically. As you browse, the following is collected:

• Server logs — our hosting provider processes standard logs, including IP address, browser type and requested pages, to operate, secure and troubleshoot the site
• Site statistics — Vercel Web Analytics records anonymous page views (page, referrer, country, browser and device type) so we can see how the site is used. It does not use cookies or identify you
• Business visitor identification — only if you click “Accept” in our cookie banner, Goji (Gojiberry) collects your IP address, the pages you visit, where you came from and how long you stay, and uses this to work out which company the visit is likely to come from
• Spam protection — the contact form uses Google reCAPTCHA (see section 08)

Information collected if you become a client. If you go on to work with us, we’ll collect further information needed to deliver the agreed services — this is gathered directly from you as part of onboarding and set out in the relevant engagement, not through this website.

We do not sell your personal information, and we do not use it to make automated decisions that produce legal or similarly significant effects for you.

We use a small number of trusted suppliers to run this site and respond to you. We don’t share your information with anyone for their own marketing purposes.

• Resend — delivers contact-form enquiries to our inbox by email
• Vercel — hosts this website and processes the server logs described above
• Google (reCAPTCHA) — checks that contact-form submissions come from a person, not a bot
• Gojiberry (Goji), and the visitor-identification providers it uses — if you accept tracking, identifies which company a visit is likely to come from

We may also disclose information where required by law, or to establish, exercise or defend legal claims.

Some of our suppliers, including Resend, Vercel, Google and Gojiberry, may process data outside the UK, primarily in the United States. Where this happens, we rely on UK Government adequacy regulations or an Information Commissioner–approved International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses), which require appropriate safeguards to protect your information. Details are available on request.

• Enquiries that don’t become client work: up to 12 months from your last contact with us, then deleted
• Client records: for the duration of our relationship, plus 6 years afterwards to meet legal and accounting obligations
• Server logs: retained only for the short period our hosting provider (Vercel) uses by default to operate and secure the site
• Business visitor data from Goji: kept only as long as it is useful for following up on business interest, and deleted on request

Information we no longer need is deleted or anonymised.

We take appropriate administrative, physical and technical measures to protect your information against unauthorised access, loss, misuse or alteration. All submissions through this website use encrypted HTTPS. While no method of transmission over the internet is completely secure, we take reasonable steps to protect information entrusted to us, and to notify you and the Information Commissioner’s Office where we are required to do so.

This site uses the following tracking technologies:

• Goji (Gojiberry) visitor identification — a marketing tool that uses your IP address and browsing activity on this site to identify which company you are likely visiting from, so we can follow up on business interest. It only runs if you click “Accept” in our cookie banner. If you click “Reject”, it is never loaded
• Vercel Web Analytics — anonymous, cookieless page-view statistics. It doesn’t store anything on your device or identify you
• Google reCAPTCHA — protects the contact form from spam and automated abuse. It sets cookies and reads device and browser signals when you use the form

When you first visit, our cookie banner asks whether you accept visitor tracking. You can change your choice at any time using the “Cookie settings” link at the bottom of every page. Withdrawing consent stops Goji from running on future page views. It does not affect what was collected before you withdrew.

Under UK GDPR, you have the following rights over your personal information, which you can exercise free of charge and which we’ll respond to within one month:

• Access — request a copy of the information we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your information in certain circumstances
• Restriction — ask us to limit how we use your information
• Portability — receive your data in a portable format, or ask us to transfer it to another organisation
• Objection — object to processing based on legitimate interests, including direct marketing
• Withdrawing consent — withdraw consent at any time, as easily as you gave it

To exercise any of these rights, or if you have a question about this policy, contact us:

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office:

• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Helpline: 0303 123 1113
• Web: ico.org.uk/make-a-complaint