Privacy notice

Viaduct Web is a sole trader business run by Martin Lister in Bredbury, Stockport. The full business address is on the terms page. For anything about your data, email [email protected].

What I collect

If you use the enquiry form I collect your name, email address, your phone number if you give one, the budget range you pick and whatever you write in the message. If you call or email me I hold that conversation and your contact details. If you become a client I also hold the information needed to do the work and get paid, such as your business details, invoice records and logins you choose to share.

Why, and on what basis

Enquiry details are used to reply to you and prepare a quote. If you ask for a free website check, I use the web address you send to check that site and write you a short report, which is kept with your enquiry. The lawful basis is legitimate interests, since you contacted me about work. Client records are used to carry out the contract between us. Invoice and payment records are kept because tax law requires it.

How long I keep it

Enquiries that do not turn into work are deleted after twelve months. Client records are kept for six years after the last invoice, which is the period HMRC requires. You can ask me to delete anything I am not legally required to keep.

This site is hosted by Cloudflare. When you send the enquiry form, it goes to a small program running on Cloudflare that checks it is not spam, emails it to me using Resend, a transactional email service, and stores it in Airtable, where I keep my enquiry records. Resend also sends you a short acknowledgement. Resend and Airtable are based in the United States, so your enquiry is sent and stored there. Card payments are handled by Stripe, who process them as their own data controller and are also based in the United States. I do not see or store card numbers. Invoices and records are kept on my own devices and backed up securely. I do not sell or share your details with anyone else.

Cookies and analytics

This site sets no cookies of its own, which is why there is no cookie banner.

Visits are counted with Cloudflare Web Analytics. It shows me totals: how many visits and page views the site gets, which pages are read, which sites people arrive from, and which countries, browsers, operating systems and types of device they use, plus how quickly pages load. Cloudflare says it does not collect or use your personal data. Its script stores nothing in your browser, and although the analytics service receives your IP address with the measurements, Cloudflare discards it at the nearest data centre and does not store it. It also does not use your IP address or browser details to single you out. So it runs on every visit, and there is nothing for you to accept.

The contact page uses Cloudflare Turnstile, and no other page does. It checks that the enquiry form is being sent by a person rather than a program sending spam. To do that it looks at signals such as your IP address and details of your browser. Cloudflare says it collects them to detect and block bots, not to identify, profile or target anyone. It also uses them to improve Turnstile, and does that as its own data controller. Turnstile does not read, store or pass on anything you type into the form.

Where any of this counts as personal data, such as your IP address on its way through, the lawful basis is legitimate interests: knowing which pages are used, and keeping spam out of the enquiry form. The links above go to Cloudflare's own documentation, which I checked in October 2026.

Your rights

You can ask for a copy of what I hold, ask me to correct it, ask me to delete it, or object to how it is used. Email me and I will respond within a month. If you are not happy with my response you can complain to the Information Commissioner's Office at ico.org.uk.

If you would rather ask a person, get in touch.