Legal
Privacy policy
What we collect, why we collect it, who else sees it, and what you can tell us to do about it.
Last updated: 2026
Who we are
This site is operated by [LEGAL ENTITY NAME] (company number [COMPANY NUMBER]), registered at [REGISTERED ADDRESS]. We are the data controller for the personal data described here — meaning we decide why and how it is used, and we are the ones answerable for it.
For anything in this policy, write to [PRIVACY CONTACT EMAIL].
What we collect
When you contact us
Our enquiry form asks for your name, email address, organization and a description of what you have in mind. You may also tick a box to receive occasional updates. The form is hosted by HubSpot, so a submission goes into our HubSpot account. If you email us directly instead, we hold that email and whatever is in it.
We ask for what we need to reply sensibly and nothing more. Please do not send us confidential or sensitive information through a web form.
When you simply read the site
Our host records standard server logs — IP address, browser, the page requested, the time — which is how any website stays secure and available. If you allow analytics cookies, we also receive statistics about which pages and episodes are used. If you allow marketing cookies, the advertising companies listed in our cookie policy receive data about your visit.
If you allow neither, we receive server logs and nothing else.
What we do not do
We do not buy personal data, we do not sell it, and we do not use it to make automated decisions about you. We do not knowingly collect anything from children; this site is aimed at working professionals and is not directed at anyone under 16.
Why we are allowed to use it
Under UK and EU data protection law we need a lawful basis for each use. Ours are:
| What we do | Lawful basis |
|---|---|
| Reply to an enquiry and discuss work with you | Legitimate interests — you asked us to, and answering is the point of the form |
| Send you updates you asked for | Consent — you ticked the box, and every email lets you unsubscribe |
| Set analytics or marketing cookies | Consent — given through the cookie banner, withdrawable at any time |
| Keep the site up and defend it from abuse | Legitimate interests — nobody benefits from a site that falls over |
| Keep records of work we have agreed | Contract, and legal obligation for tax and accounting |
Where we rely on legitimate interests, we have weighed our interest against your rights, and you can object — see your rights below.
Who else sees it
We use a small number of established suppliers. They process data on our instructions under a contract, and none of them may use it for their own purposes except where their own privacy policy governs an advertising cookie you have consented to.
| Supplier | What they handle | Where |
|---|---|---|
| HubSpot | Enquiry form submissions and our contact records | EU / US |
| [HOSTING PROVIDER] | Serving the site; server logs | [COUNTRY] |
| Google (Analytics 4, Ads) | Usage statistics; advertising measurement | US |
| Meta | Advertising measurement and audiences | US |
| Advertising measurement and audiences | US / Ireland | |
| Hotjar | Anonymized usage behavior on the site | EU (Malta) |
| Audioboom, YouTube | Only if you press play on a recording | US / UK |
We will also disclose data if the law requires it, or to protect our rights or someone's safety. If the business is ever sold or reorganized, records may transfer with it — and this policy travels with them.
Sending data outside the UK and EU
Several suppliers above are in the United States. Where data leaves the UK or European Economic Area, it is protected by an approved safeguard — the UK Extension to the EU–US Data Privacy Framework where the supplier is certified, and Standard Contractual Clauses with the UK Addendum where it is not.
How long we keep it
| What | How long |
|---|---|
| Enquiries that do not become work | 24 months from the last contact, then deleted |
| Client records | 7 years after the engagement ends, for tax and accounting |
| Newsletter subscription | Until you unsubscribe, plus a suppression record so we do not email you again by mistake |
| Analytics data | 14 months |
| Server logs | [HOSTING PROVIDER]'s standard retention, typically 30–90 days |
| Your cookie choice | 6 months, then we ask again |
Your rights
Whatever we hold about you, you can ask us to:
- Show you a copy of it
- Correct anything wrong
- Delete it, where we have no overriding reason to keep it
- Restrict or object to how we use it, including anything based on legitimate interests
- Hand it over in a portable format, or send it to someone else
- Stop marketing — absolute, no reason needed, and we will act on it immediately
- Withdraw consent at any time, including the on any page
Email [PRIVACY CONTACT EMAIL] and we will respond within one month. There is no charge. If we get it wrong, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the supervisory authority where you live — though we would rather you told us first and gave us the chance to fix it.
If you are in the United States
Much of our audience is American, and several states now give specific rights. If you are a resident of California, Colorado, Connecticut, Virginia or another state with comparable law, you may ask us to disclose, delete or correct the personal information we hold, and you may opt out of it being sold or shared for targeted advertising. We will not treat you differently for asking.
We do not sell personal information for money. However, the advertising cookies described in our cookie policy involve sharing personal information for cross-context behavioral advertising as California defines it. Choosing “Reject all” on the cookie banner, or switching marketing off in , is how you opt out — it stops that sharing on this site. We also honor the Global Privacy Control signal where your browser sends one.
Changes
When this policy changes we update the date at the top. If a change materially affects how we use your data, we will tell you directly where we can, and ask for consent again where consent is what allows it.
Contact
[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
[PRIVACY CONTACT EMAIL]