Privacy
This site collects as little as it can, keeps it only as long as it's useful, and never sells it or uses it for advertising. Here is exactly what that means.
Last updated 14 October 2026 · version 1
Who is responsible
Placeholder, to be replaced before launch: [Who is responsible for the personal data on this site: the owner's name (or business name) and a postal address or country of establishment.]
Placeholder, to be replaced before launch: [Where the owner is based and which data-protection law applies, e.g. the UK GDPR, the EU GDPR or another regime.]
What is collected, and why
When you send a message (contact form)
Your name, email address and message, so we can reply; the IP address it was sent from, to stop spam and abuse; and whether the notification email reached us.
When you comment on an article
Your name and comment, which are published once approved, and your email address, which is never shown. Only moderators see it, for example to deal with abuse or a deletion request. Comments are reviewed before they appear.
When you book a call
The booking is made on Cal.com, which handles it under its own privacy policy. We receive and keep your name, email address, the time booked and, if you came from a service package, which one.
When a team member signs in
For staff accounts only: the account's email address, and a security log of sign-ins (time, IP address, browser and approximate location from the hosting network) used to detect and investigate attacks on accounts.
Spam and abuse protection
Forms are checked by Cloudflare Turnstile, which looks at signals from your browser to tell people from bots. Each IP address is also limited to a number of submissions a day; for comments and sign-ins this counting happens in memory and isn't stored.
The security tools
The password, hash and encoding tools run entirely in your browser. Nothing you type into them is sent anywhere.
Who else is involved
- Cloudflare — Turnstile spam protection on forms.
- Resend — delivers contact-form messages to our inbox.
- Cal.com — the booking calendar, when you use it.
- YouTube — embedded videos, only after you click play.
- The hosting provider — runs the site and its database. Placeholder, to be replaced before launch: [Hosting provider to be named once chosen.]
Each handles the data it receives under its own privacy policy. Nothing is shared with anyone else, and nothing is sold.
How long it is kept
Contact messages are kept while we deal with them, then deleted 365 days after being closed. Comments that were rejected or marked as spam are deleted after 90 days; published comments stay until removed. Sign-in security records are kept for 90 days. Booking records are kept until you ask for them to be deleted.
Whatever the period, you can ask for your data to be deleted sooner — see below.
Your rights, and how to delete your data
You can ask what we hold about you, have it corrected, or have it deleted. You can also object to how it's used, and complain to your data-protection authority.
Placeholder, to be replaced before launch: [How to reach the owner about privacy: e.g. "use the contact form and mention privacy", or a dedicated email address.]
To make sure we're acting for the right person, we'll confirm by replying to the email address concerned. Deleting your data removes your contact messages, comments and booking records; sign-in security records that mention your address are kept only as anonymous events, with your address, IP, browser and location removed.
Security
The site is served only over HTTPS, locks down what scripts may run, and never stores passwords in readable form. Found a vulnerability? Please tell us through the contact page — our security.txt has the details.