Privacy notice

Information I may use

Depending on how we interact, I may process:

• your name, role, business email address, business telephone number and company details;
• information you send in an enquiry, email or other correspondence;
• contract, billing and service information where you become a client;
• public information about a business and its existing website, including source URLs and factual observations;
• records of website concepts or private preview links prepared for a business, and limited information about whether a preview was visited; and
• communication preferences, objections, opt-outs, bounces or complaints.

I do not intentionally collect special-category information for prospecting, and I do not use hidden email-opening pixels.

Where information comes from

I receive information directly from you when you contact me or work with me. For business research, information may come from publicly accessible and permitted sources such as Companies House, a business’s own website, public business directories or profiles, licensed search services, and referrals.

I aim to use role-based business addresses such as hello@ or info@ where suitable. If a named business contact is used, I record where that information was found.

Why I use information and my lawful bases

Enquiries and client work

I use information to answer enquiries, prepare quotations, deliver website and hosting services, provide support, administer contracts and maintain business records. The lawful bases are taking steps at your request before entering a contract, performing a contract, complying with legal obligations, and my legitimate interests in operating and protecting my business.

Individually reviewed B2B proposals

I may use limited public business and professional contact information to identify active UK companies that could reasonably benefit from website services, assess their public website, prepare a tailored concept, and draft a small number of relevant business communications.

For personal information involved in this activity, I rely on legitimate interests: developing my freelance business and offering relevant website services to corporate organisations. I limit outreach to contacts assessed as corporate business recipients, minimise the information used, review proposals before they are sent, limit follow-ups, and balance my interests against the individual’s rights and reasonable expectations.

Website operation and security

I use limited technical information, such as IP address, user agent, request time and requested page, where it is processed in hosting or security logs. This is based on my legitimate interests in providing, securing and diagnosing the website. This public website does not use advertising cookies, behavioural advertising or visitor analytics.

Tailored concepts and AI assistance

I may use software and artificial-intelligence services to help summarise permitted public business information, draft copy, generate website concepts and perform quality checks. Outputs used for outreach are subject to human review. I do not make solely automated decisions about people that produce legal or similarly significant effects.

A private website concept is a proposal, not the business’s live website. Preview links are unlisted, marked to discourage search indexing and normally expire after 30 days. Preview measurement is deliberately limited and does not store full IP addresses by default.

Who receives information

I do not sell personal information. I disclose it only where necessary to suppliers that help me operate the business, including:

• Cloudflare for website delivery, security and DNS;
• Zoho for business email and draft storage;
• OpenAI and relevant search-service providers where used to assist research, drafting or quality review;
• secure server, backup and technical administration providers; and
• professional advisers, regulators or public authorities where legally required.

These providers process information under their own terms and applicable data-protection arrangements. Some may process information outside the UK. Where UK personal information is transferred internationally, I use an applicable adequacy regulation or contractual and organisational safeguards intended to protect it.

How long information is kept

• Private website previews: normally 30 days, unless needed for an active conversation or project.
• Prospecting and proposal records: reviewed regularly and kept only while a relevant business conversation remains reasonably possible, normally no longer than 12 months after the last meaningful activity.
• Enquiries: normally up to 24 months after the last communication, unless they become client records.
• Client, contract and accounting records: generally up to seven years where needed for service, tax, legal or dispute purposes.
• Opt-out and suppression records: a minimal record may be kept indefinitely so that I can honour the request and avoid contacting you again.
• Technical logs: retained for a limited period according to security need and provider settings.

I may retain information longer if required by law, to establish or defend legal claims, or at your request where appropriate.

Your rights

Depending on the circumstances, you may have rights to ask for access to your personal information, correction, deletion, restriction, portability, or to object to its use. Where processing is based on consent, you may withdraw that consent. These rights can be subject to legal limitations.

To exercise another right, email [email protected]. I may need to verify your identity and will normally respond within one month.

Questions and complaints

Please contact me first at [email protected] so I can try to resolve your concern.

You may also complain to the UK Information Commissioner’s Office through ico.org.uk/make-a-complaint, or call 0303 123 1113.

Changes to this notice

I may update this notice when my services, suppliers or legal obligations change. The latest version will remain available on this page and will show its revision date.