Legal
Privacy policy
Last updated: 14 November 2026
This policy explains how Full Beans Web Development (“I”, “me”) collects and uses personal information when you use this website or get in touch. I’m committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who I am
The data controller is Tony, trading as Full Beans Web Development. You can contact me about anything in this policy using the contact form.
What I collect
When you send an enquiry through the contact form, I collect:
- your name and email address;
- your phone number and business name, if you choose to give them;
- the type of help you’re looking for and your message.
To protect the form from spam and abuse, I also process your IP address. It is stored only as a scrambled (hashed) value for up to an hour to limit repeat submissions. My hosting provider may also keep standard server logs, such as IP addresses and pages requested, for security purposes.
When you visit the site, I collect anonymous visitor statistics using Cloudflare Web Analytics, such as the pages viewed, the referring website, your browser type and country, and how quickly pages load. This doesn’t use cookies and I can’t use it to identify you.
How and why I use it
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and discussing a potential project | Taking steps at your request before entering into a contract, and my legitimate interest in responding to people who contact me |
| Keeping a record of enquiries and client contacts | Legitimate interests (running my business) |
| Protecting the website from spam, fraud and abuse | Legitimate interests (keeping the website secure) |
| Understanding how the website is used so I can improve it | Legitimate interests (running and improving my website) |
I will never sell your data or use it for marketing without your consent.
Who I share it with
I use a small number of trusted service providers who process data on my behalf:
- Perfex CRM, which I use to manage enquiries and clients, hosted on [hosting provider, location];
- [Email provider], which delivers enquiry notifications;
- Cloudflare Turnstile, which checks that form submissions come from a real person;
- Cloudflare Web Analytics, which provides anonymous, cookieless visitor statistics;
- [Web hosting provider], which hosts this website.
Where a provider processes data outside the UK, I make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement.
How long I keep it
If your enquiry doesn’t lead to any work, I delete your details within 12 months. If you become a client, I keep project and billing records for up to 6 years after our work ends, as required for tax and accounting purposes.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data I hold about you;
- ask me to correct anything that’s inaccurate or incomplete;
- ask me to delete your data;
- object to, or ask me to restrict, how I use your data;
- ask for your data to be transferred to another organisation.
To make a request, get in touch using the details above. I’ll respond within one month. There’s no charge in most cases.
Complaints
If you’re unhappy with how I’ve handled your data, please contact me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
Cookies
See the cookies page for details of the cookies this website uses.