Privacy notice

Information I may use

Depending on how we interact, I may process:

• your name, role, business email address, business telephone number and company details;
• information you send in an enquiry, email or other correspondence;
• contract, billing and service information where you become a client;
• public information about a business and its existing website, including source URLs and factual observations;
• records of website concepts or private preview links prepared for a business, and limited information about whether a preview was visited; and
• communication preferences, objections, opt-outs, bounces or complaints.

I do not intentionally collect special-category information for prospecting, and I do not use hidden email-opening pixels.

Where information comes from

I receive information directly from you when you contact me or work with me. For business research, information may come from publicly accessible and permitted sources such as Companies House, a business’s own website, public business directories or profiles, licensed search services, and referrals.

I aim to use role-based business addresses such as hello@ or info@ where suitable. If a named business contact is used, I record where that information was found.

Why I use information and my lawful bases

Enquiries and client work

I use information to answer enquiries, prepare quotations, deliver website and hosting services, provide support, administer contracts and maintain business records. The lawful bases are taking steps at your request before entering a contract, performing a contract, complying with legal obligations, and my legitimate interests in operating and protecting my business.

Relevant B2B proposals

I may use limited public business information to identify active UK companies that could reasonably benefit from website services, assess their public website, share illustrative examples or prepare a tailored concept, and send relevant business communications.

For personal information involved in this activity, I rely on legitimate interests: developing my freelance business and offering relevant website services to corporate organisations. Automatic outreach uses verified public generic corporate contacts, source-backed trading information, eligibility checks and limited sending schedules. Sole traders, uncertain entities and personal-looking contacts are excluded from this automatic process. I minimise the information used and balance my interests against the individual’s rights and reasonable expectations.

A first email may be followed by one final follow-up. Replies stop that sequence; opt-outs, bounces and complaints prevent further automatic contact. Public availability of a personal address does not, by itself, mean consent to marketing.

Website operation and security

I use limited technical information, such as IP address, user agent, request time and requested page, where it is processed in hosting or security logs. This is based on my legitimate interests in providing, securing and diagnosing the website. This public website does not use advertising cookies, behavioural advertising or visitor analytics.

Tailored concepts and AI assistance

I may use software and artificial-intelligence services to help summarise permitted public business information, generate website concepts and perform quality checks. The automatic outreach route uses controlled email templates and rule-based eligibility checks; individual messages do not require human review before sending. I do not make solely automated decisions about people that produce legal or similarly significant effects.

To stop sequences promptly, software reads the inbox receiving replies without marking messages as read. I retain limited excerpts of replies matched to outreach, together with communication status and preferences. Links to the public examples gallery do not include individual recipient identifiers, and I do not use hidden email-opening pixels.

A private website concept is a proposal, not the business’s live website. Preview links are unlisted, marked to discourage search indexing and normally expire after 30 days. Preview measurement is deliberately limited and does not store full IP addresses by default.

Who receives information

I do not sell personal information. I disclose it only where necessary to suppliers that help me operate the business, including:

• Cloudflare for website delivery, security and DNS;
• Zoho for business email and draft storage;
• a configured email sending provider and mailbox service for relevant B2B outreach, delivery handling and replies;
• OpenAI and relevant search-service providers where used to assist research, drafting or quality review;
• secure server, backup and technical administration providers; and
• professional advisers, regulators or public authorities where legally required.

These providers process information under their own terms and applicable data-protection arrangements. Some may process information outside the UK. Where UK personal information is transferred internationally, I use an applicable adequacy regulation or contractual and organisational safeguards intended to protect it.

How long information is kept

• Private website previews: normally 30 days, unless needed for an active conversation or project.
• Prospecting and proposal records: reviewed regularly and kept only while a relevant business conversation remains reasonably possible, normally no longer than 12 months after the last meaningful activity.
• Enquiries: normally up to 24 months after the last communication, unless they become client records.
• Client, contract and accounting records: generally up to seven years where needed for service, tax, legal or dispute purposes.
• Opt-out and suppression records: a minimal record may be kept indefinitely so that I can honour the request and avoid contacting you again.
• Technical logs: retained for a limited period according to security need and provider settings.

I may retain information longer if required by law, to establish or defend legal claims, or at your request where appropriate.

Your rights

Depending on the circumstances, you may have rights to ask for access to your personal information, correction, deletion, restriction, portability, or to object to its use. Where processing is based on consent, you may withdraw that consent. These rights can be subject to legal limitations.

To exercise another right, email [email protected]. I may need to verify your identity and will normally respond within one month.

Questions and complaints

Please contact me first at [email protected] so I can try to resolve your concern.

You may also complain to the UK Information Commissioner’s Office through ico.org.uk/make-a-complaint, or call 0303 123 1113.

Changes to this notice

I may update this notice when my services, suppliers or legal obligations change. The latest version will remain available on this page and will show its revision date.