Privacy notice

What this site collects

We collect information you type into a form. There are two forms: the idea-request intake and the contact forms.

• Identity and contact: name, email, and optionally phone, city, country, organisation, and preferred channel.
• Request content: your field, the problem you describe, the outcome you want, what you are starting with, disclosure status, the help you want, and any optional file you attach.
• Consent record: which boxes you ticked, when, and against which version of these terms.
• Technical: the referring page, a one-way hash of your IP address used only for rate limiting, and standard web-server logs kept by our hosting provider.

We do not use tracking pixels, session-replay tools, or advertising cookies. The only cookie this site sets is a session cookie used to protect forms against cross-site request forgery.

Why we use it

• To answer your request and to ask follow-up questions.
• To keep a record of what was requested and what was agreed.
• To protect the site against automated abuse.
• To send occasional guides — only if you separately opted in, and you can stop at any time.

Marketing consent is never a condition of receiving the service you asked for.

Who can see it

Request records are accessible to the people in our team who work on your matter. Where a matter needs a qualified professional to act — for example to file an application — we tell you who that is before sharing anything with them.

The site runs on third-party hosting infrastructure, and email is delivered through mail services. Those providers process data on our behalf as part of running the service. We do not sell, rent, or trade your information.

How long we keep it

Request records are kept for as long as needed to answer the request and to maintain our own business and professional records. Draft answers you type into the intake form are stored only in your own browser until you submit or clear them.

You can ask us to delete a request and any attached files at any time. We will do so, other than the minimum record needed to show that a request existed and was handled.

Your choices

• Ask what we hold about you.
• Ask for corrections.
• Ask for a copy of your request.
• Ask for deletion.
• Withdraw marketing or messaging consent at any time.

Depending on where you live, you may have additional statutory rights. Tell us what you need and we will act on it rather than debating which law applies.

Security

Submissions are transmitted over HTTPS, stored on access-controlled systems, and internal notification emails deliberately exclude your technical description. Email itself is not a secure channel: please do not send confidential technical material by email before we have agreed how to handle it.

Changes

When this notice changes, the version identifier at the top of the page changes with it. Consents recorded against an earlier version remain linked to that version.