Privacy Policy

When you submit an enquiry form, we collect the name, email address, phone number, and project details you provide. We use this solely to respond to your enquiry and, if we work together, to deliver the engagement.

When you visit the site, our hosting provider records standard server logs including IP address, browser type, and pages requested. These are used for security and diagnostics.

If analytics are enabled, we record aggregate usage data. We do not sell personal information or share it with advertising networks.

We process enquiry information on the basis of taking steps at your request before entering a contract, and to perform a contract once one exists.

We process server logs on the basis of our legitimate interest in keeping the site secure and available.

Enquiries that do not become engagements are deleted within twenty-four months. Engagement records are retained for the period required by applicable tax and contractual obligations, then deleted.

Server logs are retained for a short operational window and then rotated out.

Where we process personal data on behalf of a client, we act as a processor under that client's instructions and under the terms of the relevant agreement. We do not use client data for any purpose other than delivering the engagement.

Access is limited to team members assigned to the project, revoked when they roll off, and reviewed periodically.

We use third-party providers for hosting, email, and project management. Each is bound by contractual confidentiality terms. A current list of sub-processors is available on request.

We disclose information to authorities only where legally required, and where permitted we will tell you first.

You may request access to the personal information we hold about you, ask for it to be corrected or deleted, object to certain processing, or ask for a copy in a portable format.

To exercise any of these, contact us using the details below. We respond within thirty days.

We use encryption in transit, access controls with multi-factor authentication, and least-privilege permissions across our systems. Backups are encrypted and restore procedures are tested.

No system is perfectly secure. If a breach affects your information, we will notify you and the relevant authority as required by law.

This site uses only the cookies strictly necessary for it to function. If we add analytics or marketing cookies, we will request consent first and update this policy.

We update this policy when our practices change. The date at the top reflects the most recent revision. Material changes affecting existing clients will be communicated directly.