Before this goes live
This notice is written to be accurate for the site as built, but the trading name and address in the footer are still placeholders. Fill those in — a privacy notice without a named data controller is not compliant.
Who is responsible for your data
Joshua Kay, a UK sole trader trading as SMOALD, is the data controller for this website. You can reach me at joshua@smoald.com or by post on request. (A full postal address will be published here before any product goes on sale online.)
What I collect, and when
I only collect personal data when you choose to send it.
When you submit the enquiry form
The form asks for your name, email address, business name (optional), the type of work you need, a budget range, and whatever you write in the message box. That information is emailed to me so I can reply, together with your IP address so I can block abuse. To stop spam, the form runs Cloudflare's Turnstile bot check, and your IP address is kept for one hour to limit repeat submissions. If you write in a language other than English, your message is translated automatically so I can read it.
When you email me directly
Your email address and whatever you write in your message.
Automatically
This site is hosted on Cloudflare Pages. Cloudflare processes technical information such as your IP address in order to serve the site and protect it from attack. I do not run advertising trackers, and I do not set cookies of my own.
Why I use it, and my lawful basis
- To reply to your enquiry — lawful basis: legitimate interests, and steps taken at your request before entering a contract.
- To deliver work you have engaged me for — lawful basis: performance of a contract.
- To keep records required for tax — lawful basis: legal obligation.
I will not add you to a mailing list, and I will not send you marketing you did not ask for.
Who else sees it
I do not sell or share your data. It is handled by a small number of service providers acting on my instructions:
- Cloudflare — hosting and security for this website.
- Resend — delivers the enquiry form to my inbox.
- Anthropic — translates enquiries written in other languages, and helps flag spam.
- Google (Gmail) — where my email is held.
- Stripe — if you buy something, Stripe processes the payment. I never see or store your card details.
Some of these providers operate outside the UK. Where that is the case, transfers are covered by the safeguards those providers have in place, such as standard contractual clauses.
How long I keep it
- Enquiries that do not become work: up to 12 months, then deleted.
- Client records and correspondence: 6 years after the end of the work, which is the period HMRC requires for business records.
- Purchase records: 6 years, for the same reason.
Your rights
Under UK GDPR you can ask me to give you a copy of your data, correct it, delete it, restrict how I use it, or object to my using it. You can also ask for it in a portable format. Email joshua@smoald.com and I will respond within one month.
If you are not happy with how I have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
This site sets no cookies of its own and uses no analytics or advertising trackers. Cloudflare may set a strictly necessary cookie to protect the site from malicious traffic; under the UK's cookie rules this does not require your consent.
Changes
If this notice changes, the date at the top of the page changes with it.