Privacy Policy

What we collect

When you contact us through our website, we collect your name, email address, company name, and any information you provide in your message. We also collect basic analytics data about how you use our website.

How we use it

We use your contact information to respond to your enquiry and, where appropriate, to follow up on potential consulting engagements. We use analytics data to improve our website. We do not sell your data to third parties.

Third-party processors

We use the following third-party services to operate our website and business:

• Supabase — database and form submission storage
• Resend — transactional email delivery
• Vercel — website hosting and privacy-friendly analytics
• Calendly — scheduling discovery calls
• Cloudflare — DNS and security

First-party analytics

We operate a self-hosted first-party analytics service to understand how visitors use our website. No data is shared with third-party analytics providers for this purpose.

Anonymous mode (legitimate interests basis): Before you accept cookies, we collect only page path, referrer domain, UTM campaign parameters, and timestamp. No personally identifiable information is captured.

Full mode (consent basis): After you accept cookies, we additionally collect a pseudonymous visitor fingerprint hash, returning-visitor status, scroll depth, time on page, conversion events (e.g. button clicks), and approximate country derived from your IP address. Your IP address is not stored.

Data retention: Raw analytics events are retained for 90 days. Aggregated daily metrics (totals and counts only, no individual identifiers) are retained indefinitely.

Withdrawing consent: You can withdraw consent at any time by using the cookie banner or by clearing your browser cookies and local storage. Once withdrawn, collection reverts to anonymous mode only.

Data retention

We retain your personal data for up to 24 months from your last interaction with us. After this period, your data will be securely deleted unless we have a legal obligation to retain it.

Your rights

Under UK GDPR, you have the right to access, rectify, erase, restrict processing, and port your personal data. You also have the right to object to processing and to withdraw consent at any time. To exercise any of these rights, please contact us at the address below.

Contact

If you have questions about this policy or wish to exercise your data rights, contact us at shumon@journeyforce.co.uk.