Skip to content
Built by Blakes UiLtLaKeS Y B B B

Privacy Notice

This site collects as little as it can get away with. There is no advertising network, no cross-site tracking, no profiling, and nothing here is sold or shared for marketing.

Last updated: 23 August 2026

Who is responsible

Paul Blakeman, trading as Built by Blakes, of 43 Millmount Road, Sheffield, S8 9EG, United Kingdom, is the data controller for this website. Contact me at [email protected] or on 07920 281738 about anything in this notice.

What I collect, and why

When you use the contact form

I record what you type — your name, email address, and, if you choose to give them, your phone number and business name — along with your message. I also record the IP address and browser user-agent the submission came from.

  • Why: to read your enquiry, reply to it, and keep a record of what was discussed. The IP address and user-agent are kept solely to investigate and block abuse of the form.
  • Lawful basis: legitimate interests — answering enquiries about my services and protecting the form from automated abuse. Where the enquiry leads to work, the ongoing basis is performance of a contract.

When you simply read the site

Visits are counted with Fathom Analytics, which is a privacy-focused, cookieless analytics service. It does not use cookies, does not follow you between websites, and does not build a profile of you. It reports aggregate figures only — page views, referrers, country — and no data is sold or shared with advertisers. I cannot identify you from it.

This site is served through Cloudflare, which processes the IP address of every request in order to route it and to filter attacks. That processing is necessary to run the site securely.

Cookies

This site sets only strictly necessary cookies, so there is no consent banner to click through:

  • A session cookie and a CSRF token cookie, set when you visit the contact page. They exist so that the form you submit is the form you were given, and they expire when you close your browser or shortly after.
  • Cloudflare may set security cookies to distinguish legitimate visitors from automated traffic.

No analytics, advertising or profiling cookies are set at any point.

Spam protection

The contact form is protected by a hidden field and timing check, and by Cloudflare Turnstile. Turnstile confirms you are a person rather than a script by looking at your IP address and signals from your browser. Cloudflare states that it does not use this data to build advertising profiles. Without this protection the form would be unusable within days.

Who else sees your data

  • Postmark — delivers the enquiry to my inbox and sends your acknowledgement. Your message passes through their systems.
  • My hosting provider — stores the site and its database on servers located in the United Kingdom.
  • Cloudflare — sits in front of the site for security and performance, and provides Turnstile.
  • My email provider — holds the resulting correspondence in my mailbox.

These are processors acting on my instructions. Some of them are based outside the UK; where that is the case, transfers are covered by the UK's adequacy regulations or by standard contractual clauses. I do not sell your data, and I do not share it with anyone for marketing.

How long it is kept

  • Enquiries that do not lead to work — deleted within 24 months.
  • IP address and user-agent — deleted within 12 months.
  • Client records — correspondence and invoicing records are kept for 6 years after the end of the engagement, as UK tax law requires.

Your rights

Under UK data protection law you can ask me to:

  • give you a copy of the personal data I hold about you;
  • correct anything that is wrong;
  • delete it, where I have no continuing reason to keep it;
  • restrict or object to how I use it, including objecting to processing based on legitimate interests;
  • provide it in a portable format.

Email me and I will respond within one month. There is no charge. If you are not happy with how I have handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Security

The site is served over HTTPS, the database sits behind the application rather than on the open internet, and access to it is limited to me. No system is perfectly secure, but data is not kept where it does not need to be — which is the most effective protection available.

Data I process for clients

Where I build or host a system that holds your customers' data, you are the controller and I act as your processor. Those arrangements are governed by clause 18 of my terms and conditions and, where required, a separate data processing agreement.

Changes

If this notice changes, the revised version appears here with a new date at the top.