Legal / Privacy notice
What happens to your details.
This explains what happens to your details when you contact Provenance Operations. It is written to be read, not to cover anyone in jargon. If anything here is unclear, ask.
-
01 · Who is responsible
Who is responsible for your data
Provenance Operations Ltd is the data controller, which means responsibility for how your details are handled stops with me.
Provenance Operations Ltd, registered in England and Wales, company number 17319050. Registered office: 67 Regency Gardens, Walton-on-Thames, KT12 2BE. Email: [email protected].
Registered with the Information Commissioner’s Office (ICO) under reference C1981769.
-
02 · What and why
What I collect, and why
Only what you put in the contact form or an email: your name, your email address, and whatever you write in the message. It is used for one thing, to read your enquiry and reply to it. Nothing you do not send me is collected, and there is no tracking on this site building a profile of you.
-
03 · Lawful basis
The lawful basis for using it
UK GDPR asks for a lawful basis for using your data. Mine is legitimate interests: you have contacted a business to ask about its work, and replying to you is the ordinary, expected thing to do with that message. Your details are not used for marketing without asking you first.
-
04 · Retention
How long I keep it
Enquiry emails are kept while the conversation is live and for up to 12 months after I last hear from you, then deleted. If you go on to become a client, your details become part of the project record and are kept for as long as that relationship and my legal obligations require, then deleted.
-
05 · Recipients
Who else sees it
Your details pass through two services, both acting as my processors under contract. When you send the contact form it goes first to Formspree, a form-handling service (based in the United States) that receives the submission and forwards it to me by email, and does nothing else with it. From there the message sits in my inbox on Google Workspace. If you email me directly instead, only Google is involved.
Your details are never sold, and never shared for advertising.
-
06 · Cookies
Cookies and analytics
None. This site sets no cookies, runs no analytics, and carries no advertising or tracking scripts. That is why there is no cookie banner: there is nothing to consent to.
-
07 · Your rights
Your rights
Under UK GDPR you can:
- ask for a copy of the data I hold about you;
- ask me to correct anything wrong;
- ask me to delete it;
- ask me to restrict or stop using it;
- object to my using it;
- ask for it in a portable form.
To do any of these, email [email protected]. I respond within one month.
-
08 · Complaints
Complaints
If you think I have handled your data badly, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk or on 0303 123 1113.
-
09 · Changes
Changes to this notice
If this notice changes, the version on this page changes with it. Last updated 17 July 2026.