Privacy notice

This notice explains how personal information is handled when you visit ahalliday.com or enquire about Andrew Halliday's services. It covers information collected through this website. Separate arrangements may apply during a client engagement.

Who is responsible

ETJAM Ltd operates this website and is the data controller: the organisation responsible for deciding how and why personal information is used. Andrew Halliday handles enquiries on its behalf.

ETJAM Ltd is registered in England and Wales, company number 07890333. Its registered office is 38 Woodlands Avenue, Harrogate, HG2 7SJ, United Kingdom.

For privacy questions or requests, please use the contact form or write to the registered office, marked for Andrew Halliday. You don't need to include sensitive documents in an initial request.

What information is collected

• Enquiries: your name, email address, message and any other details you choose to provide, such as your company or role.
• Technical information: hosting and form providers process information such as IP addresses, request times and browser or device details to deliver and protect their services.

Please don't send patient information, passwords or other sensitive or confidential documents through the enquiry form. Providing information is your choice, but without contact details and enough context we may be unable to respond.

Why information is used

Enquiry details are used to respond, discuss whether the services are suitable, prepare a proposal where requested and manage related correspondence. They aren't automatically added to a marketing list or CRM.

For professional enquiries and business contacts, the lawful basis is legitimate interests: responding to requests, discussing potential work and managing business relationships. Technical information is used on the same basis to provide a reliable website and prevent misuse.

If you personally ask us to take steps towards a contract with you, rather than on behalf of a company, the lawful basis for those necessary steps is preparing to enter into that contract. Records may also be retained where needed to meet a legal obligation.

Service providers and overseas processing

Information is handled by service providers needed to run the website and correspondence:

• Vercel hosts the website and processes technical request information. See Vercel's privacy notice.
• Web3Forms receives enquiry submissions and delivers them to the existing email inbox. Its infrastructure and spam-screening providers also process information needed to deliver and protect the form service. See Web3Forms' privacy policy.
• Business communication providers deliver and store enquiries received through the form.
• Google Fonts supplies the site's font. Your browser connects to Google to request the font files, sending technical request information. See Google's privacy policy.

Some processing takes place outside the UK. Web3Forms operates from India and uses international infrastructure; its published data-processing agreement describes contractual transfer safeguards, including the UK Addendum where applicable. Vercel's data-processing terms also describe its transfer arrangements. You can contact us for information about the safeguards relevant to your data.

How long information is kept

Website enquiries form part of our business records. There isn't a fixed deletion period. Retention depends on the nature of the enquiry, its relevance to current or future business discussions, any resulting relationship and legal or record-keeping needs.

Web3Forms maintains its own service copy of submissions. Its current privacy policy states that submission data is retained for up to three years unless a shorter period applies or it is deleted earlier. Provider copies and technical logs have their own retention arrangements; deleting an email doesn't automatically delete those copies.

Your rights

Depending on the circumstances, you can ask for access to your personal information, correction, deletion or restriction of its use. You may also have a right to receive certain information in a portable format. These rights aren't absolute; for example, some records may need to be kept for legal reasons.

You have the right to object to processing based on legitimate interests. Please contact us and explain your circumstances so we can consider your request.

We may need enough information to confirm your identity and locate the relevant records. We don't use website enquiries to make solely automated decisions that have legal or similarly significant effects on you.

Concerns and complaints

Please contact us if you have a concern about your information. You also have the right to complain to the Information Commissioner's Office, the UK data-protection regulator, through the ICO's complaints service.

Browser storage and other websites

The cookies and browser-storage notice explains the site's notice-dismissal setting. This site doesn't use advertising cookies or analytics tracking. If you follow an external link, the other website's own policies apply.

Changes to this notice

This notice will be updated if the website or the way information is handled changes. The date above shows when it was last revised.