Privacy notice

Who is responsible

Bob Swan is operated by Chris Robinson in Belfast, Northern Ireland. For the website and enquiry service, Chris is the data controller. Privacy questions can be sent to [email protected].

What information is used

If you send an enquiry, the form collects your name, email address, optional organisation, requested service, budget band and the summary you provide. The enquiry service also records receipt and processing identifiers, timestamps and status needed to operate and audit the service.

Cloudflare Turnstile processes security signals such as IP address, user-agent header, TLS fingerprint, site key and origin to distinguish automated traffic from genuine visitors. The Bob Swan lead database does not store your IP address.

Please do not include passwords, customer records, health information or other sensitive material in an enquiry.

Why it is used

The information is used to review your enquiry, respond to you and, where you ask about possible work, take the steps needed before a possible contract.

When you contact Bob Swan as an individual about possible work, the main lawful basis for those pre-contract steps is Article 6(1)(b) of the UK GDPR. When you contact Bob Swan on behalf of an organisation, and for the security processing used to protect the enquiry service, the lawful basis is legitimate interests: responding to genuine business enquiries and keeping the service secure.

The acknowledgement checkbox records that you have seen the form notice. It is not used as consent for marketing or unrelated processing.

How long it is kept

Ordinary enquiry records are scheduled for deletion 90 days after receipt. A record may be kept longer where an active contract or legal hold applies.

After an enquiry is deleted, a minimal deletion record may be retained to prove that deletion occurred. That deletion record does not contain the enquiry text, name or email address.

Who processes it

Chris reviews enquiries. Cloudflare provides website hosting, D1 database storage, Turnstile anti-abuse checks and the service used to send the owner notification. A notification is delivered to a private Bob Swan mailbox.

Enquiry information is not sold and is not added to a marketing list.

International processing

Cloudflare and its subprocessors may process personal information outside the United Kingdom. Cloudflare's Data Processing Addendum provides transfer safeguards, including the UK Addendum and standard contractual clauses where they are required.

Your rights

Depending on the circumstances and lawful basis, you may have rights to access, correct or erase your information, restrict its use, receive portable data, or object to processing. You have the right to object to processing based on legitimate interests.

To exercise a privacy right, email [email protected]. If you remain unhappy with how your information is handled, you can complain to the Information Commissioner's Office at ico.org.uk.

Automated checks

Cloudflare Turnstile uses automated security checks to identify likely automated traffic. There is no solely automated sales decision with legal or similarly significant effect on you.