Last updated: July 2026

1. About this notice

This privacy notice explains how we collect, use, store, and protect your personal data when you visit this website or contact us through it. It also sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and how to exercise them. Please read it carefully.

2. Who we are (Data Controller)

The data controller responsible for your personal data is:

If you have any questions about this notice or how we handle your data, please contact us using the details above.

3. The personal data we collect

We only collect the data we need. Depending on how you interact with us, this may include:

• Contact form data: your name, email address, and message. You may also optionally provide your phone number and company name. This is information you choose to give us.
• Enquiry details: the service you are interested in and the content of your message.
• Technical and security data: our server automatically records limited information about requests to the website, including your IP address, which we use to apply rate limiting and to keep the website and its systems secure.

We do not knowingly collect any special category data (such as health, ethnicity, or political opinions) and we ask that you do not include such information in your messages.

4. Lawful basis for processing

Under UK GDPR we must have a lawful basis to process your personal data. We rely on the following:

• Consent (Article 6(1)(a)): when you submit the contact form, you tick a box confirming you agree to us using your details to respond to your enquiry. You can withdraw this consent at any time (see Section 9).
• Legitimate interests (Article 6(1)(f)): we process limited technical data (including your IP address) to keep our website secure, prevent abuse, and apply rate limiting. Our legitimate interest is protecting our systems and users, and we have balanced this against your rights and freedoms.

5. How we use your data (purposes)

We use your personal data to:

• respond to your enquiry and provide the information or quote you have requested;
• communicate with you about a potential or ongoing project;
• keep our website, database, and email systems secure and available; and
• detect, prevent, and limit spam, abuse, and automated attacks (including rate limiting).

We do not use your data for automated decision-making or profiling, and we do not sell your data or use it for third-party advertising.

6. Who we share your data with

We do not sell or rent your personal data. We share it only with the service providers (processors) who help us run this website, and only to the extent needed:

• Hosting provider — [PLACEHOLDER: hosting provider name]: hosts the website and the database in which contact submissions are stored.
• Email / SMTP provider — [PLACEHOLDER: email/SMTP provider name]: delivers the notification email that lets us see and respond to your enquiry.

Each of these providers acts under a contract that requires them to protect your data and to process it only on our instructions. We may also disclose data where we are required to do so by law, or to establish, exercise, or defend legal claims.

7. How long we keep your data (retention)

• Contact form submissions: retained for 12 months (365 days) from the date we receive them, after which they are automatically deleted, unless we need to keep them longer to comply with a legal obligation or to deal with a query or dispute.
• Rate-limiting records: the short-lived records that pair an IP address with a request counter are transient and are automatically deleted once the limiting window expires (within one hour).
• Server / security logs: retained for [PLACEHOLDER: server log retention period] and then deleted or anonymised.

8. International transfers

[PLACEHOLDER: confirm whether all personal data is stored and processed within the UK or European Economic Area (EEA).] Where any of our processors store or process data outside the UK/EEA, we ensure an appropriate safeguard is in place, such as UK adequacy regulations, an International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. [PLACEHOLDER: name the specific safeguard used by your hosting and email providers.]

9. Cookies

We keep cookies to an absolute minimum. This website sets a single strictly-necessary cookie:

• admin_session: set only when a site administrator signs in to the private admin area. It stores a signed session token to keep that person logged in. It is never set for ordinary visitors and is not used to track you.

We do not use any analytics, advertising, or third-party tracking cookies. Because the only cookie we use is strictly necessary for a service you have expressly requested (administrator sign-in), no cookie consent banner is required under the Privacy and Electronic Communications Regulations (PECR).

10. Your data protection rights

Under UK GDPR you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure: to ask us to delete your personal data in certain circumstances.
• Right to restrict processing: to ask us to limit how we use your data.
• Right to data portability: to receive the data you gave us in a structured, commonly used, machine-readable format.
• Right to object: to object to processing based on our legitimate interests.
• Right to withdraw consent: where we rely on consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before you withdrew it.

11. How to exercise your rights

To exercise any of these rights, please email us at [PLACEHOLDER: contact email]. We will respond within one month. Exercising your rights is free of charge, and we may ask you to verify your identity before we act on your request.

12. Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Website: ico.org.uk
Helpline: 0303 123 1113

13. Changes to this notice

We may update this privacy notice from time to time. When we do, we will revise the “Last updated” date at the top of this page. Please review it periodically to stay informed about how we protect your data.