Website policies
Privacy Notice
Who is responsible for your information?
I am Richard Neville, a sole trader, working as Richard Neville — Web Application Engineering. I operate nevweb.co.uk from Huddersfield, West Yorkshire.
I am the data controller for personal information used to run this website, deal with enquiries and manage my own business relationships. For privacy questions or to exercise your rights, email privacy@nevweb.co.uk.
This notice explains how I handle information about website visitors, prospective clients and business contacts. Where I process personal information on a client’s instructions, my responsibilities depend on the relevant contract and processing arrangements. The client’s privacy information applies to its use of that information; this notice does not replace it.
What information do I use?
When you enquire or correspond with me, I may use your name, email address, organisation, the details you provide about your project and subsequent correspondence. When you send the Contact form, I receive your enquiry by email and send an automatic confirmation to the address you provide. I also keep a record that you confirmed you had read this notice, with the notice version shown and the time of your enquiry. That confirmation is not consent to marketing, analytics or any other use; it records that this information was available to you.
The website handles technical information needed to operate securely, such as IP addresses, request times, browser information and security events. Its form uses session, request-verification and anti-abuse information: to limit repeated submissions, the site briefly holds a one-way hash of your IP address and, after an enquiry, a one-way hash of your email address, each for no more than 10 minutes. Please avoid sending passwords, payment-card details or sensitive information about yourself or other people in an initial enquiry.
If you allow analytics, Google Analytics collects information about website use, such as pages viewed and technical browser/device information, using identifiers and cookies. This can be personal information; it should not be treated as anonymous merely because it is presented in reports. The Cookie Policy explains your choices.
Why I use your information
| Purpose | Lawful basis |
|---|---|
| Reply to business enquiries, assess requirements and organise correspondence | My legitimate interests in responding to people who contact me and managing prospective business relationships |
| Take steps you specifically request before a contract with you personally, or perform that contract | Contract, where that basis applies; when you represent a company, ordinary business-contact handling is generally based on legitimate interests |
| Protect the website, prevent abuse and investigate technical problems | Legitimate interests in operating a secure, reliable service |
| Use AI-assisted tools to help read and handle correspondence, research project requirements and estimate the work or time involved | Legitimate interests, subject to an assessment of necessity, proportionality and people’s rights |
| Optional website analytics | Your consent |
| Meet applicable accounting, tax or other legal requirements | Legal obligation, where applicable |
Providing your contact details and message is necessary for me to respond to a website enquiry. The organisation field is optional. Sending an enquiry does not create a project contract or subscribe you to marketing. You do not have to allow analytics to contact me.
AI-assisted handling
Enquiries from the Contact form, and email you send me, arrive in my Google Workspace mailbox. I use Hive, a work-management service, and your enquiry and our correspondence may be read by AI features in Hive to help me handle them. This means the information is not handled only in my email account.
I may also use AI-assisted tools to help research the requirements described in an enquiry and estimate the work or time involved. Relevant parts of an enquiry may be supplied to those tools for that purpose, and I leave out identifying details they do not need. I review what AI tools produce and remain responsible for my replies and estimates.
This is assistance with handling and assessing enquiries, not a decision to accept or reject you made solely by a machine. You can contact me to ask about this use or raise an objection. I consider objections in accordance with the lawful basis and your circumstances.
Systems and service providers
The website is hosted on a server provided by Akamai (Linode). Google Workspace handles email. I may organise enquiry details and follow-up work in FusionOps, my internal system, and Hive, the work-management service described above. Hive, and the providers of the AI features and tools described above, may process the relevant information they receive.
Service providers may have their own processing responsibilities for account administration and other activities described in their notices. I assess arrangements for the services I use and the access needed to deliver them. I may also share information with professional advisers or authorities where necessary for a lawful purpose. I do not sell enquiry details.
I use Google Analytics only after you choose to allow analytics. It is separate from handling your enquiry; form messages and contact-field values are not sent as analytics events.
International processing
Where the website is hosted does not determine where every supplier processes information; it is not a promise of UK-only processing. Email, work-management, analytics and AI services can involve processing or access in other countries, including the United States.
Where a restricted international transfer is involved, the applicable arrangement needs a valid transfer mechanism, such as UK adequacy regulations or appropriate contractual safeguards. You can contact me for information about the safeguards relevant to your information.
How long information is kept
Enquiries that do not become projects are normally retained for up to 12 months after the last meaningful contact, and deleted sooner where there is no continuing need. If an enquiry becomes a project, relevant information is managed as part of that relationship and retained according to the work involved and applicable contractual, accounting and legal requirements.
Security and diagnostic information is kept for the period needed to protect the service, resolve faults and investigate incidents. Retention may be extended where a particular incident or legal requirement justifies it. Cookie and preference lifetimes are set out in the Cookie Policy.
Deletion needs to account for copies in email, Hive, FusionOps, AI tools, other service providers and backups. Deleting an email does not by itself remove copies or summaries held elsewhere, so each is dealt with separately. Backup information is removed through the relevant retention cycle and is not used for ordinary ongoing work after deletion from active systems. I review whether information is still needed rather than retaining it indefinitely just in case.
Your choices and rights
Depending on the circumstances, you can request access to your personal information, correction, erasure, restriction or portability. These rights are subject to the conditions and exceptions in data protection law.
You can object to processing based on legitimate interests, including the AI-assisted use described above. I will consider your objection and respond explaining the outcome.
You can withdraw analytics consent at any time through Cookie settings. Withdrawal stops future permitted collection; it does not undo processing already lawfully carried out. Withdrawing analytics consent does not prevent me dealing with your enquiry under the relevant lawful basis.
Email privacy@nevweb.co.uk to exercise a right. I may need proportionate information to confirm your identity. Rights requests are normally answered within one calendar month, subject to any extensions or adjustments permitted by law.
Concerns and complaints
Please contact privacy@nevweb.co.uk if you are concerned about how I handle personal information. I will acknowledge a data-protection complaint within 30 days, investigate it, keep you informed and provide an outcome without undue delay. That acknowledgement period is distinct from the response period for a rights request.
You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint.
Changes
I update this notice when the website or relevant processing changes. The date and version on this page identify the current notice. Material new uses require appropriate information and assessment before they begin; a changed notice is not automatic permission for unrelated processing.