Privacy Policy

Who we are

This website is operated by [Registered company name] ("we", "us"), registered in England and Wales, registered office [Registered office address]. We are the data controller for personal data collected through this site. Contact: [privacy@craigchappell.co.uk].

What we collect

• The contact form. Name, work email, company, role, the topic you choose and the message you write.
• Technical data. If analytics are enabled (see the Cookie Policy), pages viewed, referring site, approximate location from IP address, device and browser type.
• Correspondence. Anything you send us by email or through LinkedIn.

Why we use it and the legal basis

• To reply to your enquiry and arrange a call: our legitimate interest in responding to people who contact us, and the steps needed before entering a contract.
• To send occasional blog updates if you ticked the box: your consent, withdrawable at any time using the link in every email.
• To understand how the site is used and improve it: our legitimate interest, using analytics only where you have accepted them.

Who we share it with

Service providers who process data on our instructions: our website host, form handling and email provider, and our CRM. [Dev / Craig: list the actual providers here, e.g. Netlify, HubSpot, Google Workspace.] Where a provider is outside the UK or EEA, transfers rely on adequacy decisions or standard contractual clauses.

We do not sell personal data. If you ask for an introduction to Nodeiro, we pass your enquiry to Nodeiro with your knowledge; Nodeiro then becomes a controller of that data under its own policy.

How long we keep it

Enquiries and correspondence: up to 24 months after our last contact, unless an engagement follows. Newsletter consent: until you withdraw it. Analytics: as set out in the Cookie Policy.

Your rights

Under UK GDPR you can ask for access to your data, correction, erasure, restriction, portability, and you can object to processing based on legitimate interest. Where processing is based on consent you can withdraw it at any time. Email [privacy@craigchappell.co.uk] and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

Security

Data is transmitted over HTTPS and stored with providers that maintain recognised security certifications. Access is limited to the people who need it to respond to you.

Changes

We will post any changes on this page and update the date at the top.