Legal

Privacy Policy

This site has no analytics, no advertising and no tracking. The personal information it handles is what you type into the contact or project forms, anything you attach, the IP address that comes with it, and — if you buy something — the order details Stripe processes on my behalf. This page explains exactly what happens to all of it.

Last updated 31 July 2026

Who is responsible

This website is operated by AJWC Tech Consulting Ltd, a private limited company registered in England & Wales, which is the data controller for the information described below.

Company number16867620
ICO registrationZC149054
Registered office3 The Row, Stanton St. Bernard, Marlborough, Wiltshire, SN8 4LR
Data protection contactArchie Cook [email protected]

I am the named data protection contact on the ICO register. This is a one-person company, so anything you send about your information comes straight to me rather than to a department.

What I collect, and why

Only the contact form collects personal information. Nothing is collected from simply reading the site.

InformationWhenWhyLawful basis
Name, email address, subject, messageOnly when you submit the contact formSo I can read your message and reply to itLegitimate interests — responding to an enquiry you chose to send
Your IP addressRecorded alongside a form submissionTo identify and block spam and abuse of the formLegitimate interests — keeping the form usable and secure

I do not use your details for marketing, I do not add you to any mailing list, and I do not sell or share them with anyone for their own purposes.

Cookies

This site sets one cookie, and only at the moment you submit the contact form. It is a standard PHP session cookie used to limit how many times the form can be submitted in a short period, which is what stops it being used to send spam.

It contains no personal information, it is not used to track you, and it is deleted when you close your browser. Because it is strictly necessary for a service you have asked for, it does not require consent — which is why you are not being shown a cookie banner. The cookie policy covers this in full.

There are no analytics cookies, advertising cookies or third-party trackers on this site. Fonts are served from this domain rather than from Google, so reading the site does not reveal your visit to anyone else.

Who else can see it

WhoRoleWhat they see
FasthostsWeb hostingHosts this site and processes the form submission on my behalf. UK based.
Google (Gmail)Email providerYour message is delivered to a Gmail inbox, so it is stored on Google’s systems.
Stripe Payments UK, Ltd.Taking paymentOnly if you buy something. Stripe receives your name, email, billing address and card details directly — they are entered on Stripe’s pages, not on this site.
Google (Docs viewer)Document previewOnly if you open the CV viewer on a phone: the CV is displayed through Google’s document viewer, so Google sees that request.

If you send me a project brief

The project form asks for your name, business name, email, phone number, current website and what you want the site to do. I use it only to prepare your quotation and to do the work if you go ahead.

Files you attach reach me as email attachments and nothing else. They are not stored on this website — they are read straight out of temporary storage, attached to the email and discarded. The site checks what each file actually is rather than trusting its name, and refuses anything outside a short list of document and image formats.

Please do not attach anything containing other people’s personal data — customer lists, staff records, spreadsheets of contacts — unless we have agreed it first and it is genuinely needed for the work. If you do, you remain the controller of that information and I handle it only on your instructions.

If you buy something

Payments are processed by Stripe Payments UK, Ltd. Stripe is a separate data controller for the payment itself and a processor acting for me for the order record.

What Stripe collectsYour name, email address, billing address and card details, entered on Stripe’s own secure pages.
What I can seeYour name, email, billing address, the amount, and the card brand and last four digits. I never see, hold or have access to your full card number.
Saved cardsIf you pay a deposit, your card is stored by Stripe so the balance can be charged on completion. It is held by Stripe, not by me, and I will always tell you before taking the balance.
Why I am allowed toPerforming our contract (UK GDPR Article 6(1)(b)), and complying with tax and accounting law (Article 6(1)(c)).
International transfersStripe is a global company and some processing happens outside the UK. Those transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

Stripe has its own privacy policy at stripe.com/gb/privacy, which covers what it does with payment data as a controller in its own right.

How long I keep things

Enquiries that go nowhereDeleted within 12 months.
Project briefs and attachmentsKept for the life of the project and for 12 months after, in case you come back. Deleted sooner if you ask.
Invoices, orders and payment recordsSix years after the end of the accounting period they relate to. I am legally required to keep these by HMRC and the Companies Act, so this is the one category I cannot delete on request.
Client work filesKept while a care plan is running, and for 12 months after it ends, so a site can be restored if something goes wrong.

Your rights

You can ask me for a copy of what I hold about you, ask me to correct it, or ask me to delete it. Write to [email protected] and I will respond within one month. If you are not happy with how I have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk.

You can also ask me to restrict or object to what I do with your information, and to send you a copy in a portable format. One honest limit: I cannot delete invoices and payment records on request, because I am legally required to keep them for six years. Everything else I can and will remove.