PRIVACY POLICY

Last updated: 14 September 2026

This notice explains how Patched Consulting handles personal information when you send a website enquiry or discuss working together.

WHO IS RESPONSIBLE FOR YOUR DATA?

Bradley J Patching, trading as Patched Consulting, is the controller of the personal information described here. For privacy questions or to exercise your rights, contact brad@patchedconsulting.co.uk.

WHAT WE COLLECT

The contact form asks for your name, email address and message. Your website address is optional. We also receive any business details or other personal information you choose to include, and subsequent correspondence about your enquiry.

We need your name, email and message to understand and respond to your enquiry. You do not have to provide a website address. Please avoid sending passwords, payment details or sensitive personal information through the form.

WHY WE USE YOUR INFORMATION

We use enquiry information to respond, understand the support you need, arrange a discovery call and discuss a proposal. We may also keep relevant correspondence to manage our business relationship and resolve questions or disputes.

Where you ask us to take steps before entering a contract with you, our lawful basis is taking those pre-contractual steps. For general enquiries and contact with people acting for a business, we rely on our legitimate interests in responding to enquiries and managing business relationships, balanced against your rights. Where a specific legal duty requires us to retain or disclose information, we rely on that legal obligation.

Sending an enquiry does not subscribe you to a newsletter. Any separate marketing use will be explained when it is offered.

HOW THE FORM WORKS AND WHO RECEIVES DATA

The website uses Contact Form 7 to send your submitted details to the site administrator by email. Contact Form 7 does not itself keep a database of submitted messages; the resulting emails and replies can remain in the recipient mailbox.

We use 20i to host the website and Google Workspace to deliver and store enquiry emails and replies. These providers and their authorised service providers process information needed to operate these services, including relevant technical and email-delivery data. We do not copy enquiries into a CRM.

Information may also be disclosed to professional advisers or authorities where needed to meet legal obligations or establish, exercise or defend legal claims. We do not sell your enquiry information.

INTERNATIONAL TRANSFERS

Our providers may process information outside the UK. Google Workspace uses international infrastructure, and 20i’s processing terms also provide for international transfers. Their terms provide for applicable lawful transfer mechanisms, including adequacy arrangements or approved contractual safeguards for UK data.

Details are available in Google’s Cloud Data Processing Addendum and 20i’s Data Processing Agreement. You can contact us for information about the safeguards relevant to your enquiry data.

HOW LONG WE KEEP INFORMATION

Enquiries that do not lead to a client relationship are deleted within 12 months of the last meaningful contact. If an enquiry becomes a client relationship, relevant information forms part of the client record and is retained according to the service, accounting and legal requirements that apply. Information needed for an active complaint, dispute or legal obligation may need to be kept longer. Copies held in provider recovery or backup systems may remain until those systems complete their deletion cycles.

SECURITY AND AUTOMATED DECISIONS

The website uses HTTPS to protect information in transit. Enquiry information is handled through the hosting and email services described above. No internet service can guarantee complete security, so please send only information relevant to your enquiry.

The contact form does not make automated decisions about you or use your enquiry for profiling that produces legal or similarly significant effects.

YOUR RIGHTS

Depending on the circumstances and the lawful basis used, you can request access to your information, correction of inaccurate information, deletion or restriction of its use. Data portability may apply to information you provided where processing is automated and based on consent or a contract. These rights are subject to legal conditions and exemptions.

Your right to object: you can object to processing based on legitimate interests for reasons relating to your particular situation. If information is used for direct marketing, you can object to that use at any time.

Contact the privacy email above to make a request. We may need proportionate information to verify your identity. We normally respond within one month, and will explain if a permitted extension is necessary.

COMPLAINTS

Please contact us if you have concerns about how we handle your information. You also have the right to complain to the UK's Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint/, telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

CHANGES TO THIS NOTICE

We will update this page when our handling of enquiry data changes. The date above shows when it was last updated.