PRIVACY POLICY.

What we collect, and why

1. If you use the contact form

We collect your name, email address, phone number (if you provide one), and your message, along with the submission time, your IP address, and browser user-agent.

We use this to respond to your enquiry, that's the only purpose. Our legal basis is legitimate interest (following up on a request you initiated) and, where a booking follows, taking steps to enter into a contract with you. Submissions are stored in Cloudflare KV, a database service provided by our hosting provider, Cloudflare. We don't currently run an automatic deletion schedule for this data; we keep it for as long as it's relevant to the enquiry or booking and delete it on request (see "Your rights" below).

While you're filling in the form, your entries are also saved temporarily in your browser's session storage, not a cookie, so a reload or an accidental tab switch doesn't lose what you've typed. This never leaves your device, and is cleared automatically once you submit successfully or close the tab.

2. If you book a session

Booking is handled by Cal.com, an appointment-scheduling provider, embedded directly on this page. When you pick a slot, Cal.com collects your name, email, and any other details their booking form asks for, directly, we don't see this data pass through our own systems. Cal.com acts as an independent data controller for that information; their own privacy policy governs how they handle it, including any cookies their embedded widget sets while you're using it.

3. Spam protection

The contact form is protected by Cloudflare Turnstile, a challenge that verifies submissions come from a real person rather than automated spam. Turnstile processes technical signals about your device and browser to make that determination. It does not use tracking cookies and isn't used for advertising.

4. Site analytics

We don't currently run any analytics or visitor-tracking on this site. If that changes, this section will be updated to say exactly what's collected and why before it goes live, not after.

Cookies

This site doesn't set any cookies of its own, and Turnstile doesn't rely on cookies to function. The one exception is the booking widget: because it's Cal.com's own embedded page running inside ours, it may set cookies under Cal.com's domain while you're using it, governed by their policy linked above, not ours. That's why there's no cookie banner on the rest of the site, there's nothing of ours to consent to.

Who we share data with

Cloudflare provides our hosting, the database that stores contact submissions, and spam protection. Cal.com handles booking, as described above. We don't sell data, share it with advertisers, or pass it to any other third party. Both providers may process data outside the UK; each provides its own contractual safeguards for these transfers.

Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to ask what personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to its processing, and to receive a copy in a portable format. To exercise any of these for data we hold (contact-form submissions), get in touch through the contact form. For data Cal.com holds about a booking, their own privacy policy explains how to reach them directly. We don't yet have a dedicated privacy inbox separate from general enquiries, if that changes, this page will be updated with a direct contact.

If you're unhappy with how we've handled your data, you can complain to the UK's supervisory authority, the Information Commissioner's Office (ICO).

Children

Our minimum age for booking a session is 16. This site isn't directed at children below that age, and we don't knowingly collect data from them.

Changes to this policy

If what we collect or why changes, we'll update this page and the date at the top.