Privacy notice

Summary

This site collects the minimum needed to answer an enquiry and to run the website itself. Forms collect your name, work email and whatever you choose to write, plus technical campaign information (like a referrer) attached automatically. Analytics, if you accept it, is aggregate and consent-gated and never receives your name, email or form content. We do not sell data, we do not send marketing email, and we do not ask for cookies beyond what is described here.

What we collect and why

• Enquiry data (forms). Name, work email, and optional company, role, country and message — used solely to reply to your enquiry. Stored in our lead database (Cloudflare D1) with the form type, the time of submission, the version of this notice you saw, and your attribution snapshot (see below).
• Attribution data. When you submit a form we store campaign fields (source, medium, campaign, landing page, referrer domain) captured on your device during your visit. This tells us which content is useful. It contains no identifiers.
• Analytics (optional, consent-gated). If — and only if — you accept analytics, Google Analytics 4 records aggregate page and event data. No names, emails, phone numbers, company names or enquiry text are ever sent to analytics. If you decline, no analytics script or network call happens at all. See cookies and analytics.
• Server logs. Our infrastructure provider keeps short-lived technical logs (IP address, timestamps, request size) for security and abuse protection. We do not log form contents in server logs.
• Readiness Check (home page). The seven-question self-check runs entirely in your browser: your answers are scored on your device, are never submitted to us or to any third party, and disappear when you close the page. You can verify this yourself — with your browser's network tools open, no request is made while answering.

Where data lives and who processes it

The website and forms run on Cloudflare's global network; enquiry data is stored in Cloudflare D1, and — for internal handling of your enquiry — a restricted operational copy may be exported to a Google Sheet shared only with named, authorised people at Banbreach. Google Analytics data, when you have consented, is processed by Google. These providers may process data in countries other than yours; we rely on their contractual safeguards for such transfers.

Form protection. The enquiry forms embed Cloudflare Turnstile, a bot-protection challenge. When you use a form, Cloudflare processes technical signals about your browser and interaction (and may set a short-lived challenge cookie) to verify that the submission comes from a person — this is a security measure, not profiling, and no enquiry content is sent to it. See cookies and analytics for the items it can set.

Booking pop-up. Choosing a time on the Contact page opens a pop-up embedding the Google Calendar booking page. Nothing is requested from Google until you open it; from then on Google processes the interactions and technical details needed to offer and confirm a time slot (and may set Google cookies — see cookies and analytics). Booking details you enter go to the calendar we configure, not to our analytics.

How long we keep it

• Enquiries that do not progress: reviewed and deleted or anonymised within 12 months.
• Enquiries that become engagements: retained while active and for an agreed period after closure.
• Consent records: kept as long as relevant to demonstrate your choice.
• Analytics data: subject to Google Analytics retention settings.

Your rights

Depending on where you are (including visitors from India, the UK and the US), you may have rights to access, correct, delete or export your personal data, and to object to or restrict processing. To exercise any of them, use the general enquiry form with the category "Privacy or data request", or the reply thread of your original enquiry. We respond within one business day and will not ask you to prove more than we need to locate the record.

What we ask you not to send

Please do not submit confidential information, sensitive personal data or customer data through the forms. A short description of the workflow is enough for us to respond usefully.

Changes

If this notice changes materially, the version above updates and new forms record the new version at submission time. Continued use after a change means the new notice applies.