1. Who is responsible for your information

The data controller for this website is Joshua Kane Edwards, a sole trader trading as Arkenloft. Privacy enquiries can be sent to privacy@arkenloft.co.uk.

2. What we collect

We may receive your name, email address, organisation, project information and anything else you choose to send through the contact form or by email. Our hosting provider may also process technical logs such as IP address, request time, browser information and requested URLs for security and reliable delivery.

3. Why we use it and our lawful basis

• Responding to enquiries and preparing work: to take steps at your request before entering a contract, or for our legitimate interests in running and developing the business.
• Delivering contracted services: where processing is necessary to perform a contract.
• Security, abuse prevention and site reliability: our legitimate interests in keeping the website and communications secure.
• Optional website analytics: your consent, where you choose to enable Google Analytics 4 through the privacy panel. You can withdraw this choice at any time through “Privacy choices” in the footer.
• Legal and accounting records: where required to comply with legal obligations.

We do not use contact-form submissions to add you to marketing lists without an appropriate lawful basis and any consent required by PECR.

4. How long we keep information

General enquiries that do not become projects are normally deleted or anonymised within 12 months unless there is a reason to retain them longer. Client and financial records may be retained for longer where needed for contracts, tax, accounting, dispute resolution or other legal obligations. Server/security logs should be configured for the shortest period reasonably needed by the host.

5. Who we share information with

Information may be processed by service providers used for hosting, email, backups, professional advice, project delivery and optional analytics. Contact-form enquiries are transmitted through the configured authenticated email provider; this release documents Google Workspace SMTP as the standard option. Where you choose analytics, Google Analytics 4 processes the analytics information described in our cookie policy.

6. International transfers

Google Analytics 4 is loaded only after your opt-in, and no ad-tech or remote font services are intentionally loaded.

7. Your rights

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase or restrict your personal data, object to certain processing, receive portable data, and withdraw consent where consent is relied on. You can contact us using the details above.

8. Complaints

If you have concerns, please contact us first so we can try to resolve them. You also have the right to complain to the UK Information Commissioner's Office (ICO).

9. Cookies and similar technologies

Google Analytics 4 is optional and is not loaded until you actively opt in through the privacy panel. Advertising and behavioural tracking are not enabled. See the cookie policy for the current storage/access inventory, the Google Analytics cookies used after opt-in and how to change your choice.

10. Changes

We will review this notice when our processing changes and update the review date above. Material changes should be made before new processing begins.