What we collect, and what we do with it.

Who is responsible

OwnerDeck operates this website and is responsible for the personal data described here. For anything in this notice, contact privacy@ownerdeck.com.

What we collect

When you send an enquiry. The business name, what the business does, an optional website address, what you are looking for, your description of the problem, your name, and an email address or a phone number, whichever you would rather be reached on (or both). All of it comes from what you type into the form.

The automatic note. If you give an email address, we send one automatic note to it to say your enquiry arrived. It is sent once, in the language you used, and it is not a newsletter. Nothing you wrote is in it except your first name, and only when that is a plain name. To avoid sending it twice, we keep a one-way scrambled form of the address (a hash, which cannot be turned back into the address) for 24 hours. The note goes out through the same email delivery service that delivers your enquiry to us.

When you email or message us. Whatever the message contains, plus the address or number it came from.

When you visit. Standard server request logs are produced by our hosting provider: IP address, browser type, requested page and timestamp. These are generated automatically and used for security and reliability.

Analytics

This site uses Google Analytics 4 to count visits and see which pages people read, but only if you allow it. It records the page you viewed, roughly where in the world you are, the kind of device you used, and which of a small number of actions you took: opening WhatsApp, starting the enquiry form, sending it, or clicking an email address.

Nothing is loaded until you allow it. A banner asks once the page has loaded and you start to scroll or tap, and until you answer no Google script is fetched and no cookie is set. If you decline, or never answer, it is never loaded at all.

If you allow it, Google Analytics sets a cookie in your browser to tell one visit from the next, which lasts up to two years unless you clear it or change your answer. It does not receive your name, your email address or anything you type into the enquiry form. You can change your mind at any time using Cookie settings at the foot of any page: declining afterwards stops collection immediately and deletes the cookies already set. Nothing on this site stops working either way.

Google Analytics was switched off from 27 September to 9 October 2026, and nothing was sent to Google in that time.

Our own counting

Separately from Google, this site keeps its own counters: the number of times a page was opened, the country a request came from, the language and the width of the screen, and which of the same small number of actions were taken. Those counters run for everyone, whether or not you allow Google Analytics.

They are counts and nothing else. No cookie is set, nothing is stored on your device or read from it, no identifier is created, your IP address is not recorded, and there is no row anywhere that represents you. Two visits by one person and one visit each by two people are indistinguishable in it, which is a limitation we accept in exchange for not holding anything about anybody. Addresses are reduced to the page path before they are counted, so anything after a question mark is discarded and never stored.

What we do not do

• No advertising cookies are set by this site.
• Nothing here follows you across other websites, and no advertising audience is built from your visit.
• Your details are never sold, rented or shared for marketing.
• You are not added to a mailing list because you sent an enquiry.

Why we are allowed to hold it

Enquiry details are processed to take steps at your request before entering into a contract, and on the basis of our legitimate interest in responding to people who contact us. Server logs are processed on the basis of our legitimate interest in keeping the site available and free from misuse. Google Analytics runs only with your consent, which you can withdraw at any time.

Who else sees it

The site is hosted by Vercel, which processes requests and generates the server logs described above. Enquiries are delivered to our own email. Both providers act as processors on our instructions and are not permitted to use your data for their own purposes.

If you allow Google Analytics, Google receives the visit details described above and processes them for us. Google may process them outside the European Union, including in the United States.

How long it is kept

• Enquiries that do not lead to work: up to twelve months, then deleted.
• Enquiries that become client work: kept for the length of the engagement and for six years afterwards, which is what tax and contract record-keeping requires.
• Server logs: retained by the host on their own schedule.

Your rights

You can ask for a copy of what we hold about you, ask for it to be corrected, ask for it to be deleted, or object to us holding it. Email privacy@ownerdeck.com and you will get a reply within thirty days. There is no charge.

If you are in the EU or UK and you are not satisfied with how we have handled a request, you may complain to your national data protection authority.

Changes

If this notice changes materially, the date at the top changes with it. Nothing here applies retrospectively to data already deleted.