Last updated: 8 August 2026.
The short version
If you send me an enquiry, I use your details to reply to you and to keep a record of our conversation. That is it. I do not sell your data, I do not share it with advertisers, and I do not add you to a mailing list unless you tick the box asking me to. If you never become a client, I delete your enquiry after two years.
What I collect, and why
When you send an enquiry
Whatever you type into the contact form: your name, email address, and anything you choose to tell me about your business, what you need, your timeline and your budget. The business name, website, phone number and every question in the fuller brief are optional. You can leave them all blank and still get a reply.
I use this to reply to you, to work out whether I can help, and to write you a proposal if it is a fit.
When you take the Business Score
Your answers, your score, and the name and email address you give me so I can send you the result.
When you become a client
The information needed to actually do the work and get paid: contact details, project material you send me, invoices and payment records.
When you just visit the site
The site runs on Cloudflare, which keeps standard server logs including IP addresses for security and to stop abuse. I do not run advertising trackers, I do not sell visitor data, and there is no cross-site profiling on this website.
My lawful basis for using it
| What | Lawful basis |
|---|---|
| Replying to your enquiry and preparing a quote | Taking steps at your request before entering a contract. UK GDPR Article 6(1)(b). |
| Delivering work and getting paid | Performance of a contract. Article 6(1)(b). |
| Keeping records, protecting the site from abuse | Legitimate interests. Article 6(1)(f). Running a business safely and keeping a record of what was agreed. |
| Sending you occasional updates | Your consent. Article 6(1)(a). Only if you tick the box, and you can withdraw it at any time. |
| Keeping invoices and accounts | Legal obligation. Article 6(1)(c). HMRC requires business records to be kept. |
How long I keep it
| What | How long |
|---|---|
| Enquiries that do not become projects | 24 months, then deleted |
| Business Score submissions | 24 months, then deleted |
| Client project files and correspondence | 6 years after the work finishes |
| Invoices and accounting records | 6 years, as HMRC requires |
| Newsletter subscribers | Until you unsubscribe |
| Server logs | Per Cloudflare's standard retention |
Who else sees it
I am a one-person studio, so in practice the answer is nobody but me. The exceptions are the suppliers whose tools I use to run the business. Each of them only ever sees what they need to do their job:
- Cloudflare, who host the website and process the contact form.
- Google Workspace, for email.
- FormSubmit, used only as a backup route if the main form fails, so that your message still reaches me rather than disappearing.
- Stripe, for payments. Stripe handles card details directly and I never see your card number.
- An accountant, for invoices and tax returns.
I will also disclose information if the law requires it. I do not sell your data to anyone, ever, and I do not share it for anyone else's marketing.
Where your data lives
Mainly in the UK and the EU. Some suppliers listed above are based in the United States and may process data there. Where that happens, transfers are covered by the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information I hold about you
- have anything inaccurate corrected
- ask me to delete it
- ask me to restrict how I use it
- object to my using it under legitimate interests
- ask for it in a portable format
- withdraw your consent to marketing at any time
Email hello@quietbuild.co.uk and I will deal with it within one month. There is no charge.
If you are not happy with how I have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. I would rather you told me first so I can put it right.
Cookies
This site does not set advertising or analytics cookies. The contact form saves a draft of your answers in your own browser's local storage, so you do not lose your work if you close the tab. That draft never leaves your device until you press send, and it is deleted the moment your enquiry goes through. You can clear it yourself at any time with the "Clear the form" button on the contact page.
Security
The site runs entirely over HTTPS. Form submissions are encrypted in transit. Access to my systems is protected by strong, unique passwords and two-factor authentication. No system is perfect, but I take this seriously, and if there were ever a breach affecting your rights I would tell you and the ICO as the law requires.
Children
This is a business-to-business service and is not intended for anyone under 18. I do not knowingly collect information about children.
Changes to this notice
If I change anything meaningful here I will update the date at the top. If the change materially affects you, I will tell you directly.
Questions about any of this? Get in touch and I will answer them properly.