Privacy policy.

The contact form

If you use the contact form I collect your name, your email address, your phone number and business name if you give them, and your message. There is one hidden field used only to catch automated spam. It collects nothing about you and is never seen by a real visitor.

Why I need it

Only to read your enquiry, reply to it, and talk through a possible project. Your details are never sold, shared for marketing, or added to a mailing list.

Lawful basis

If you are enquiring about work, the basis is Article 6(1)(b), steps taken at your request before entering into a contract. You asked for a quote or a conversation, and I cannot respond without using what you sent. Once we agree to work together, the same basis covers everything needed to deliver the project.

For anything that is not about a possible piece of work, such as a general question, the basis is legitimate interests under Article 6(1)(f): replying to someone who has deliberately contacted my business is the only thing I do with it, and it is what you would expect. I do not rely on consent here, because you would then be able to withdraw it while still waiting on a reply, which would leave me unable to answer you.

Who processes it

The form is handled by Formspree, a third-party form processor based in the United States. They receive what you submit and forward it to my email inbox, acting as a processor on my instructions. From there it sits in my email account. Nobody else sees it.

How long it is kept

Enquiries that do not turn into work are deleted within twelve months. If we do work together, I keep the correspondence for the length of the project and for six years afterwards, which is the normal period for business and tax records.

Analytics and cookies

This site can run a lightweight analytics script provided by my hosting platform. It is not cookieless. If, and only if, you accept analytics in the banner, it sets a single first party cookie called session-id. That cookie holds a randomly generated identifier and nothing else, it exists so that several page views in one visit can be counted as one visit rather than several, and it expires thirty minutes after your last activity. It is not used to identify you, to build a profile, or to follow you to any other website. No cookie is set if you decline or simply ignore the banner, which is the default state.

When it does run, it records the page you viewed, the page you came from, your browser user agent, your browser language, a country guessed from your device timezone, and page speed measurements. The analytics processor is Tinybird. The data is not sent to Tinybird directly from your browser: it is posted to a path on this domain and proxied onward by my hosting platform, so it appears as a first party request. The geographic region in which Tinybird stores and processes that data is not currently confirmed to me by the hosting platform. I have asked them for clarification and will update this notice once I have a definite answer. Until then I make no claim that the data stays in the UK or the EU. The request unavoidably exposes your IP address to the receiving servers, as any web request does, and I have no access to IP level data.

Because that cookie is not strictly necessary, it is blocked until you accept it. Declining is the default and nothing analytics related loads unless you choose otherwise. There are no advertising, tracking or profiling cookies on this site at all.

The social media and content page shows examples from TikTok and Instagram. Nothing loads from either platform until you click to load it, so by default no request is made to them and they set nothing. Once you do click, your browser contacts TikTok or Instagram directly, those platforms will see the request along with your IP address, and they may set their own cookies under their own privacy terms rather than mine.

Your rights and deletion

You can ask to see what I hold about you, ask me to correct it, ask me to delete it, or object to my use of it. Email hi@bennydunks.uk and say what you want removed. I will action it and confirm, normally within a few days and always within one month. If you are unhappy with how I have handled it, you can complain to the Information Commissioner's Office at ico.org.uk.