Privacy Policy
This site has no analytics, no advertising and no tracking. The personal information it handles is what you type into the contact or project forms, anything you attach, the IP address that comes with it, the browser details Cloudflare’s human check reads on pages with a form, and — if you buy something — the order details Stripe processes on my behalf. This page explains exactly what happens to all of it.
Last updated 14 October 2026
Who is responsible
This website is operated by AJWC Tech Consulting Ltd, a private limited company registered in England & Wales, which is the data controller for the information described below.
| Company number | 16867620 |
|---|---|
| ICO registration | ZC149054 |
| Registered office | 3 The Row, Stanton St. Bernard, Marlborough, Wiltshire, SN8 4LR |
| Data protection contact | Archie Cook — [email protected] |
I am the named data protection contact on the ICO register. This is a one-person company, so anything you send about your information comes straight to me rather than to a department.
What I collect, and why
Only the forms collect personal information, and the human check below runs only on pages that have one. Nothing is collected from simply reading the site.
| Information | When | Why | Lawful basis |
|---|---|---|---|
| Name, email address, subject, message | Only when you submit the contact form | So I can read your message and reply to it | Legitimate interests — responding to an enquiry you chose to send |
| Your IP address | Recorded alongside a form submission | To identify and block spam and abuse of the form | Legitimate interests — keeping the form usable and secure |
| Your IP address, browser user agent and TLS fingerprint (a technical detail of the connection), read by Cloudflare’s human check (Turnstile) | When a page with a form loads | To tell real people from bots, so the forms cannot be used for spam and scams | Legitimate interests — keeping the forms usable and secure |
I do not use your details for marketing, I do not add you to any mailing list, and I do not sell or share them with anyone for their own purposes.
Cookies
This site sets no cookies, and neither does Cloudflare’s human check on the forms.
It keeps a few small items in your browser instead: your theme and motion choices, your basket, and a copy of a contact message while it sends, so a failed send does not lose it. None of them identifies you, and each exists only because you used that feature — which is why you are not being shown a cookie banner. The cookie policy covers this in full.
There are no analytics cookies, advertising cookies or third-party trackers on this site. Fonts are served from this domain rather than from Google, so reading the site does not reveal your visit to anyone else. The one outside script is Cloudflare’s human check, which loads only on pages with a form.
Who else can see it
| Who | Role | What they see |
|---|---|---|
| Cloudflare, Inc. | Web hosting, form handling and the human check | Hosts this site and runs the code that receives the forms, on my behalf, so everything you submit passes through it. Its human check (Turnstile) reads your IP address and browser details on pages with a form. US company. |
| Resend (Plus Five Five, Inc.) | Email delivery | Sends each form submission, and anything you attach, to my inbox on my behalf. US company. |
| Google (Gmail) | Email provider | Your message is delivered to a Gmail inbox, so it is stored on Google’s systems. |
| Stripe Payments UK, Ltd. | Taking payment | Only if you buy something. Stripe receives your name, email, billing address and card details directly — they are entered on Stripe’s pages, not on this site. |
Cloudflare and Resend are US companies, so some of this processing happens outside the UK. Both are certified under the UK Extension to the EU-U.S. Data Privacy Framework, and their data processing terms also include standard contractual clauses. Cloudflare also uses what its human check reads to improve its bot detection, as a controller in its own right; its Turnstile Privacy Addendum explains how.
If you send me a project brief
The project form asks for your name, business name, email, phone number, current website and what you want the site to do. I use it only to prepare your quotation and to do the work if you go ahead.
Files you attach reach me as email attachments and nothing else. They are not stored on this website — the form handler holds them in memory only long enough to attach them to the email Resend delivers, then discards them. The site refuses anything outside a short list of document and image formats.
Please do not attach anything containing other people’s personal data — customer lists, staff records, spreadsheets of contacts — unless we have agreed it first and it is genuinely needed for the work. If you do, you remain the controller of that information and I handle it only on your instructions.
If you buy something
Payments are processed by Stripe Payments UK, Ltd. Stripe is a separate data controller for the payment itself and a processor acting for me for the order record.
| What Stripe collects | Your name, email address, billing address and card details, entered on Stripe’s own secure pages. |
|---|---|
| What I can see | Your name, email, billing address, the amount, and the card brand and last four digits. I never see, hold or have access to your full card number. |
| Why I am allowed to | Performing our contract (UK GDPR Article 6(1)(b)), and complying with tax and accounting law (Article 6(1)(c)). |
| International transfers | Stripe is a global company and some processing happens outside the UK. Those transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. |
Stripe has its own privacy policy at stripe.com/gb/privacy, which covers what it does with payment data as a controller in its own right.
How long I keep things
| Enquiries that go nowhere | Deleted within 12 months. |
|---|---|
| Project briefs and attachments | Kept for the life of the project and for 12 months after, in case you come back. Deleted sooner if you ask. |
| Invoices, orders and payment records | Six years after the end of the accounting period they relate to. I am legally required to keep these by HMRC and the Companies Act, so this is the one category I cannot delete on request. |
| Client work files | Kept while a care plan is running, and for 12 months after it ends, so a site can be restored if something goes wrong. |
Your rights
You can ask me for a copy of what I hold about you, ask me to correct it, or ask me to delete it. Write to [email protected] and I will respond within one month. If you are not happy with how I have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk.
You can also ask me to restrict or object to what I do with your information, and to send you a copy in a portable format. One honest limit: I cannot delete invoices and payment records on request, because I am legally required to keep them for six years. Everything else I can and will remove.