Your information

Privacy & cookies

I use your information to respond to you, provide the services you ask for and keep this website working securely. Optional analytics only run with your permission. This notice explains what happens to your information when you visit this website or enquire about working with me.

Who is responsible?

I am Jonathan Boyd, a sole trader trading as Jonathan Boyd Consulting. I am the controller responsible for the website and enquiry information described in this notice under UK data protection law, including the UK GDPR and Data Protection Act 2018. My business address is 4 Brotherton Wood, Livingston, EH54 8EX, United Kingdom. Contact me about privacy or your rights at jonathan@jb-consulting.co.uk or +44 (0)7595 305911.

Information you choose to share

If you use the contact form, email or call me, I use your contact details, any organisation or role information you provide, and your message to respond, discuss potential work and keep a record of the discussion. The form asks for your business email address and message; your name is optional. There is no file upload. Direct email links open your email application, and your email service may send technical message information.

Providing information is voluntary, but I need enough information to understand and respond to your enquiry. Please avoid sending sensitive personal information or confidential business material in an initial enquiry.

Why I use it

For business enquiries, I rely on legitimate interests: answering requests about my services and managing a relevant business conversation. I limit the information used to what is needed for those purposes. If you ask me to take steps towards a contract with you personally, I use the information necessary for those steps on that pre-contractual basis. Where records must be retained by law, I rely on the relevant legal obligation.

Technical information such as IP addresses, browser details, request times and security logs may be processed to deliver the website and protect it against misuse. My lawful basis is the legitimate interest in running a reliable, secure service. Optional Google Analytics uses consent, as explained below.

An enquiry does not subscribe you to a mailing list. I do not sell your personal information. The form uses automated email validation and spam filtering, but I do not use your information for solely automated decisions that have legal or similarly significant effects on you.

Who may receive it

Contact form submissions are processed by Formspree and sent to my business email address. Formspree also processes technical information, such as IP addresses and browser details, to deliver submissions and help prevent spam and abuse. Read the Formspree privacy policy.

Enquiry emails are handled through Microsoft 365, supplied through GoDaddy. These providers may process message content and technical information to deliver, administer and secure the email service. See the Microsoft privacy statement and GoDaddy privacy policy. Providers supporting communications and record storage may also process information to deliver those services. I may also disclose information where legally required, or where necessary to professional advisers to deal with a legal matter. I do not publish your enquiry on this website.

The website is hosted through Cloudflare Pages. Cloudflare may process IP addresses, browser information and technical request logs to deliver and secure the site. You do not need an account to browse this website.

Hosting provider information: Cloudflare privacy policy, including its information about end users of customer websites.

How long information is kept

• Unsuccessful enquiries: I delete or anonymise them within 12 months of the last meaningful contact.
• Form submission history: the Formspree plan provides a 30-day submission history. Copies delivered to my inbox follow my enquiry retention policy; this history limit is not a promise that every provider log or backup is erased after 30 days.
• Analytics: the website’s Google Analytics property is configured for 2 months of event-data retention and 14 months of user-data retention. New activity can restart the user-data retention period. These settings do not apply to most aggregated standard reports.
• Cookie preference: your choice is remembered for up to 180 days. An expired preference is cleared when the site next checks it and you are asked again. Analytics cookie expiry is explained below.

If a specific legal obligation or an actual dispute requires longer retention, I retain only the information needed for that purpose and review it when the matter ends. Client records are subject to the retention information supplied for the engagement. Providers may retain service, security and backup records under their own applicable policies.

International processing

The providers used for this website and enquiries operate internationally, so information may be processed outside the UK, including in the United States. Formspree describes US processing in its linked privacy policy. Google and Cloudflare describe reliance on the UK Extension to the EU–US Data Privacy Framework for covered transfers, and contractual safeguards where applicable, in their linked policies. This does not mean that all information stays in the UK or that every provider uses the same arrangement.

You can contact me for details of the transfer arrangements relevant to your information and how to obtain copies or information about applicable safeguards. Provider privacy notices describe their own practices; they do not remove my responsibilities for the personal information I control.

Your rights and complaints

Depending on the circumstances, you can request access, correction, deletion, restriction of processing or a portable copy of your information. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Contact me using the details above. I may need proportionate information to verify your identity or locate the relevant records, and will respond within the timescales required by law. These rights are subject to legal conditions and exceptions. You do not need a business email address to exercise your privacy rights: you can email or write to me directly.

You can raise a concern with me or complain to the Information Commissioner’s Office (ICO). You do not need to contact me first to exercise your right to complain to the ICO.

Analytics and your cookie choices

With your consent, I use Google Analytics, loaded through Google Tag Manager, to understand visits and improve this website. Analytics may collect information about pages viewed, interactions, referral sources, device and browser details, and approximate location. Google receives technical connection information when its services load. The contact form does not add your name, email address or message to the Analytics data layer.

Google Tag Manager and Analytics are not loaded until you select Accept analytics. Selecting Reject analytics keeps them off. You can still browse and use the contact form. Advertising consent remains off.

Your choice is stored locally in your browser under jb-analytics-consent-v1 and remembered for up to 180 days, solely to respect this preference. With permission, Google Analytics may set first-party cookies such as _ga and _ga_* to distinguish visits and sessions; their default expiry can be up to two years and may be renewed on a visit. Your browser settings can also remove or block cookies.

Use Cookie settings in any page footer to change your choice. Rejecting after previously accepting stops future analytics loading, removes accessible Google Analytics cookies on this domain and reloads the page to stop the running tags. It does not undo information already collected. Please finish any unsent enquiry before changing that choice.

I rely on your consent for this optional analytics processing. Google may process information outside the UK. See Google’s privacy policy, its information about partner sites and its international transfer safeguards. You can contact me about your analytics information using the details above.

Essential technology and external links

Cloudflare may use security cookies or similar technology where needed to protect the site. See Cloudflare’s cookie information for details; the cookies used depend on the features enabled. The website does not embed external fonts, videos or social widgets. Links to research and LinkedIn only open those services when you follow them. Those services have their own privacy and cookie policies.

Protecting your information

The website and form submission use encrypted HTTPS connections. I use enquiry information only for the purposes described here and keep access limited to those who need it to provide the relevant service. No internet service can promise absolute security; please avoid including sensitive personal information or confidential documents in an initial enquiry.

Changes to this notice

I will update this notice when the website or its use of personal information changes. If I plan to use your information for a new purpose, I will provide the relevant privacy information before doing so and seek consent where it is required.