Privacy policy

What we collect

When you book a call through this site we ask for:

• your name and work email address
• what you would like to discuss, if you tell us
• the date, time and time zone you choose for the call

Like most websites, our hosting provider also records basic technical information such as your IP address, browser type and the pages requested, which is used for security and to keep the site running.

We use no advertising trackers and no analytics cookies, and we do not profile visitors or measure your behaviour across the site. The only non-essential technology on the page is the anti-spam check described below, which the booking form needs in order to accept a submission.

Why we use it

We use the booking details for one purpose: to arrange and hold the call you asked for, and to follow up on it afterwards. The legal basis is taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries.

Who handles it on our behalf

To make a booking work, your details pass through a small number of service providers acting under our instructions:

• Google Calendar and Google Meet (Google LLC): the call is created as a calendar event and you receive an invitation with a video link.
• Resend (Resend Inc.): sends the confirmation email to you and a notification to us.
• Vercel (Vercel Inc.): hosts this website and runs the booking form.
• Cloudflare (Cloudflare Inc.): manages our domain, routes email sent to our addresses, and provides the Turnstile anti-spam check on the booking form. Turnstile confirms that a submission comes from a person rather than a script. It receives your IP address and basic browser information for that check, may store a short-lived token in your browser for it, and is not used for advertising or to track you.
• Upstash (Upstash Inc.): stores a short-lived record of how many booking attempts have come from your IP address, so the form cannot be abused to flood our calendar or send mail in our name. These records expire automatically within a day.

Some of these providers process data outside the UK, including in the United States, under standard contractual safeguards. We do not sell or share your information with anyone else.

How long we keep it

Calendar events and the emails around them are kept as ordinary business records so we can refer back to conversations we have had. Our hosting provider’s technical logs are retained for a short period and are not used to build any profile of you; we do not write your name or email address into them. Anti-spam and rate-limiting records expire automatically within a day. If you would like your details removed, email us and we will delete them unless we are required to keep them.

Your rights

Under UK data protection law you can ask to see the information we hold about you, have it corrected or deleted, or object to how we use it. Email hello@gatehousebateman.com and we will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Changes

If we change how we handle information we will update this page and the date at the top.