Privacy.

I'm a one-person business, so this is short. I collect what I need to reply to you and to keep the site working, and nothing else.

Who's responsible

Huw Davies, trading as Huwbert, in Bridgend, South Wales. I'm the data controller for anything described here. If you want to reach me about it, use the contact form.

The contact form

When you send the form I get your name, your email address and your message. It arrives as an email in my inbox, and a copy is saved in the system I use to manage client work so I can keep track of what I've replied to. I use it to reply to you. I don't add you to a mailing list, because I don't have one, and I don't pass your details to anyone else.

If we end up working together the enquiry becomes part of my business records, which I have to keep for six years for tax. If we don't, the saved copy is deleted automatically after a year, and you can ask me to delete it sooner. Anything caught as spam goes after 90 days.

Technical logs

Sending the form also records your IP address and which browser you're using, alongside whether the message sent, so I can tell a genuine delivery problem from a bot hammering the form. The same happens when a submission gets rejected as spam.

Those two details are deleted automatically after 90 days. The record that an enquiry happened stays, but by then it can't be tied back to a device.

Spam checking

The form uses Cloudflare Turnstile to tell people from bots. It runs in your browser and reports back to Cloudflare, which is what stops the form filling my inbox with junk.

Cookies

There aren't any. This site sets no cookies at all, which is why you've never been shown a banner asking you to accept them. Nothing is stored on your device and nothing is read off it.

Visitor numbers

Cloudflare counts page views for me, so I can see which pages people actually read. It's the privacy-preserving sort: no cookies, nothing kept on your device, no profile built up about you, and nothing that follows you to other sites. I see totals, not people.

I do it because running a business site completely blind isn't much use, and this is the least intrusive way I've found. There's no advertising and no third-party tracking. If you'd rather not be counted, any tracker blocker will stop it and nothing on the site breaks.

Who else handles it

• Cloudflare hosts the site, runs the spam check and counts the page views, so requests to huwbert.co.uk pass through them.
• Resend delivers the email your message arrives in.
• Google Workspace is where my inbox lives.

All three are suppliers doing a job for me. None of them get to use your details for their own purposes.

If you're a client with a portal login

Clients get an account on the customer portal, and it records what happens there: when you log in, which documents you open, and when you sign or approve something. That's deliberate. If there's ever a disagreement about what was agreed and when, the record settles it. It's kept for as long as you're a client and for six years afterwards, for the same tax reasons.

Your rights

You can ask me what I hold about you, ask me to correct it, or ask me to delete it, and I'll do it unless I'm legally required to keep it.Ask through the form and I'll come back to you within a month, usually a lot sooner.

If you think I've handled your details badly, you can complain to the Information Commissioner's Office at ico.org.uk. I'd rather you told me first so I can put it right.

Last updated 9 August 2026.