Privacy
We sell data-residency and compliance reviews, so it would be poor form to be vague about our own. This is the whole of what we collect and what happens to it.
Last updated 2026-08-27
What we collect
If you send us a message through the contact form, we receive the name, email address, and message text you type into it. That is the whole of it. There is no hidden field, no tracking pixel in the form, and no enrichment against third-party data.
If you book a call, the scheduling provider collects your name, email address, and the time you chose, so that it can put the meeting in both calendars.
If you simply read the site, our analytics records the pages you visit, roughly where in the world the request came from, and what referred you. It does not record who you are.
Who processes it
Contact form submissions are delivered by Formspree, which stores them on its own infrastructure and forwards them to us by email. Call bookings are handled by Cal.com. Site analytics are collected by Google Analytics 4. Each of these is a third-party processor with its own privacy policy, and each receives only the data described above.
We do not sell your data, we do not share it with advertisers, and we do not use it to train models.
How long we keep it
Enquiries that become engagements are retained for the life of the engagement and its contractual record-keeping period. Enquiries that do not become engagements are deleted after 24 months. Analytics data follows the retention period configured in Google Analytics.
Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it, and we will do so within 30 days. Email the address you have been corresponding on, or send the request through the contact form, and say what you want done.
If you are in the EU or UK, the lawful basis for processing your enquiry is legitimate interest: you contacted us about a commercial engagement and we are replying to you. You can object to that processing at any time, and we will delete the enquiry.
Cookies and analytics
Google Analytics 4 sets cookies in your browser to distinguish one visit from another. If you would rather it did not, browser-level blocking, the Google Analytics opt-out extension, or any standard content blocker will stop it, and the site works normally without it.
We set no advertising cookies and run no remarketing.
Changes to this notice
If this notice changes materially we will update the date at the top of the page. We do not maintain a mailing list, so there is nothing to unsubscribe from.
Questions about any of this
Send them through the contact form and we will answer them properly. If the question is about an engagement rather than the notice, a call is usually faster.