Privacy Policy

Your Website is a product of Two Wrens Limited. This notice explains what personal data is collected through this site, why it is collected, and what you can do about it. If anything is unclear, ask me.

Who is responsible for your data

Two Wrens Limited is the data controller for the personal data described here.

• Registered in England and Wales.
• Company number 09698581.
• Registered office: Ivy Cottage, Western Rd, Crediton, Devon, United Kingdom, EX17 3LT.
• Privacy contact: hello@twowrens.co.uk.

What I collect, and why

There are no customer accounts and no newsletter signup on this site. Personal data reaches me in only a few ways.

When you use the contact form

The form collects your name, email address and the message you send, plus any optional phone number, company name or topic you select. Those details are emailed to me so I can reply. They are not stored in a website database.

Lawful basis: taking steps at your request before entering a contract (Article 6(1)(b)), or my legitimate interest in responding to people who contact me (Article 6(1)(f)).

When you book a call

Bookings are handled by Calendly, which collects your name, email address, any notes you add and the time you choose. The booking calendar only loads if you allow it — see the Cookie Policy. I use these details to hold the call and to send the confirmation and any follow-up.

Lawful basis: Article 6(1)(b) or Article 6(1)(f), as for the contact form.

When you email or phone me

Whatever you choose to put in an email or say on a call, plus your contact details, arrives with me and stays while we are in contact. I use it to reply and to keep a record of what was discussed.

Lawful basis: Article 6(1)(b) where we are working towards or under a contract, otherwise the legitimate interest in Article 6(1)(f) of answering business enquiries.

When you fill in the website brief

The brief on this site collects your name, email, business details, what you want the website to achieve, sites you like, brand notes, and any logo or photographs you attach. I store that in a database on the hosting server, with the files alongside it, so I can prepare for our call. I also email myself a summary. Abandoned forms are not saved — nothing is stored until you send the brief.

Lawful basis: taking steps at your request before entering a contract (Article 6(1)(b)).

When you simply visit

The hosting platform keeps standard server logs, which can include your IP address, the pages requested and your browser type. These exist to keep the site running and secure.

If you allow Analytics in the cookie banner, Google Analytics 4 also receives page views and a small set of events (for example sending an enquiry or opening the booking calendar), together with any campaign parameters on the link you used. Microsoft Clarity may also receive interaction data used for heatmaps and anonymised session recordings. Analytics does not load unless you allow it — see the Cookie Policy.

Lawful basis: legitimate interests for server logs (Article 6(1)(f)). For Google Analytics and Microsoft Clarity, PECR consent to store or access information on your device, with UK GDPR Article 6(1)(a) consent for the related analytics processing.

Who else sees it

I do not sell personal data and I do not share it for anyone else's marketing. It reaches other organisations only where they provide part of the service.

• Calendly — scheduling, where you use the booking calendar.
• Google LLC — Google Analytics 4, only if you allow Analytics cookies.
• Microsoft Corporation — Clarity, only if you allow Analytics cookies.
• Email and hosting providers — delivering mail, serving this site, and storing website briefs and uploaded files.
• Professional advisers or authorities — only where the law requires it or to establish or defend a legal claim.

Data leaving the UK

Some of those suppliers process data outside the UK, including in the United States. Where that happens, the transfer relies on UK adequacy regulations or on the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with the supplier's own safeguards. You can ask me which mechanism applies to a particular supplier.

How long it is kept

• Enquiries that do not become work — up to 12 months from our last contact, then deleted.
• Website briefs that do not become work — up to 12 months from our last contact, then the record and any uploaded files are deleted.
• Booking records in Calendly — up to 12 months after the call.
• Client correspondence, website briefs that become work, and project records — for the life of the engagement and then six years, to meet contractual, tax and professional record-keeping obligations.

Your rights

Under UK data protection law you can ask me to give you a copy of your data, to correct it, to delete it, to restrict how it is used, or to provide it in a portable format. You can object to processing carried out on the basis of legitimate interests. Where processing rests on consent — the booking calendar or Analytics — you can withdraw it at any time, and doing so does not affect anything done beforehand.

Email hello@twowrens.co.uk and I will acknowledge within five working days and respond within one month. There is no charge.

Cookies and similar storage

The site stores your cookie choice in your browser. Optional categories (booking calendar and Analytics) only load after you allow them. The Cookie Policy sets out what each category does, and you can change your mind whenever you like using Cookie settings in the footer.

Keeping it secure

The site is served over HTTPS. Access to the inbox, the scheduling account and the stored briefs is limited to me. Contact-form messages are emailed to me and are not kept in a website database. Website briefs, including any files you attach, are stored on the hosting server so I can prepare for the call.

Complaints

If you think I have handled your data badly, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk (opens in a new tab), or on 0303 123 1113.

Changes to this notice

If this site starts doing something new with personal data — a mailing list or online checkout, for instance — this notice will be updated before that happens and the date at the top will change.

The consultancy site at twowrens.co.uk/privacy has a matching notice for that site's own pages.