Privacy notice.

Who looks after your information?

Peter Feeney trading as tyd. is the data controller. You can write to Flat 5A, Abbey Walk, Romsey, Hampshire, SO51 8JQ, or email hello@tydhr.co.uk. Peter is the only person at tyd. who accesses enquiries.

What we collect

The enquiry form asks for your name, email address and message. Business name and phone number are optional. We use these details to understand and respond to your enquiry. If you do not provide the required details, we cannot process the form.

The inspiration options only insert editable example text into your browser. Nothing is submitted until you send the form. Please keep initial enquiries general: do not include employee names, medical information or confidential case details. We can arrange a suitable secure way to discuss those later.

Our hosting, security and form providers may process technical information such as your IP address, browser details, referring page and request times to operate and protect their services.

Why we use it

We use enquiry information to reply, discuss suitable support and keep track of that conversation. Our lawful basis is our legitimate interest in responding to business enquiries and running tyd. Where you personally ask us to take steps towards a contract with you, we rely on those pre-contract steps instead. Our legitimate interest in maintaining a safe, functioning website also supports necessary security processing.

We do not use enquiries for newsletters or unsolicited marketing, sell your information, or make decisions with legal or similarly significant effects about you solely by automated means. Formspree uses automated spam filtering, which may classify a submission as spam.

Where enquiries go

When you submit the form, your browser sends your enquiry directly to Formspree, Inc., which processes it on our behalf. Formspree stores the submission and sends a notification to our Microsoft 365 business mailbox, hello@tydhr.co.uk. Peter manages initial enquiries in Formspree and that business mailbox.

OpenAI’s ChatGPT Sites hosts this website and processes hosted visitor information on our behalf under its Sites data-processing terms. Cloudflare provides domain and DNS services, and Cloudflare infrastructure supports website delivery and security. Microsoft provides our business email service. These providers and their authorised personnel may process information as needed to operate, secure and support their services. Providers may also use some account, security or service information for their own purposes, as explained in their privacy notices. We may disclose information where required by law.

Further information: Formspree privacy policy, Formspree security information, OpenAI privacy policy, Cloudflare privacy policy and Microsoft privacy statement.

International processing

Formspree states that it hosts submissions with Amazon Web Services in the United States. Hosting, domain, security and email providers may also process information outside the UK. We do not describe these services as UK-only.

The ChatGPT Sites Data Processing Addendum covers hosted visitor data and incorporates standard contractual clauses amended by the ICO’s UK Addendum for UK data. This is separate from using ChatGPT to create or edit the website.

Cloudflare’s published data-processing terms provide UK transfer safeguards, including standard contractual clauses with the UK Addendum where applicable. Microsoft’s published business-service data-protection terms also include contractual UK transfer safeguards. The terms that apply depend on the service and account; these provisions do not mean that all processing stays in the UK.

Formspree states that it relies on standard contractual clauses as a processor. Formspree has confirmed the processing and UK international-transfer arrangements for tyd.’s account. For information about the applicable safeguards, or to request a copy, contact hello@tydhr.co.uk.

How long we keep it

If an enquiry does not become client work, Peter deletes the enquiry and related correspondence from the Formspree dashboard and business mailbox six months after the last meaningful contact. This is a manual retention practice, not an automatic website feature. If a provider’s archive keeps a submission for a shorter period, the mailbox copy may remain until our six-month period ends.

When handling a deletion request, Peter checks the relevant Formspree entries, email correspondence and any copies or exports he holds. Deleted-item and recovery folders must also be considered. If you become a client, we will explain the records and retention arrangements for the engagement separately.

Deleting an entry or email from active systems does not necessarily erase every provider copy immediately. Recovery, backup, security and legally retained records may remain under the provider’s retention arrangements. Exact expiry periods depend on the provider and account settings; no fixed backup-erasure deadline is promised in this notice.

Your choices and rights

Depending on the circumstances, you can ask for access to your information, correction, deletion, restriction of use or portability. You can object to processing based on legitimate interests. Contact Peter using the details above. We normally respond within one month, subject to the extensions and exceptions allowed by law.

You can also complain to the Information Commissioner’s Office, the UK data protection regulator. You do not have to contact us first.

Cookies and updates

Our cookie notice explains the technologies confirmed in use. We will update this notice when our practices change.